Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Incsub Subscribe
Filtered by product Buddypress-activity-plus
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-9455 1 Incsub 1 Buddypress-activity-plus 2019-10-10 7.8 HIGH 8.1 HIGH
The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfb_photos[] parameter in a bpfb_remove_temp_images action.