5.3
Medium
CVE-2025-62973 Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly…
Description
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through 2.10.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BuddyForms 2.10 | earliest → 2.10.2 | No fix stated |
Other CVEs of BuddyForms
The 8 CVEs of BuddyForms →
CVE-2026-107658
BuddyForms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via 'bf_post_type' Parameter via Post-Type Confusion
5.4
Medium
CVE-2026-107622
BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter
9.8
Critical
CVE-2026-81785
Unauthenticated Broken Access Control in BuddyForms <= 2.9.0 versions
6.5
Medium
CVE-2025-32151
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
7.5
High