5.3
Moyenne
CVE-2025-62973 Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly…
Description
Missing Authorization vulnerability in Themekraft BuddyForms buddyforms allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyForms: from n/a through 2.10.2.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BuddyForms 2.10 | premières → 2.10.2 | Pas de correctif indiqué |
Autres CVE de BuddyForms
Les 8 CVE de BuddyForms →
CVE-2026-107658
BuddyForms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via 'bf_post_type' Parameter via Post-Type Confusion
5.4
Moyenne
CVE-2026-107622
BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter
9.8
Critique
CVE-2026-81785
Unauthenticated Broken Access Control in BuddyForms <= 2.9.0 versions
6.5
Moyenne
CVE-2025-32151
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
7.5
Élevée