BU
Product
BuddyForms
12
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 7Low 0
Watch
Add BuddyForms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-81785 | 6.5 | Sep 10 | WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability Affected: through 2.9.0 |
| CVE-2024-30198 | 6.1 | Mar 27 | WordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 2.8.5 |
| CVE-2024-12038 | 5.4 | Feb 22 | Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode Affected: before 2.8.16 |
| CVE-2024-47377 | 5.4 | Oct 5 | WordPress BuddyForms plugin <= 2.8.12 - Cross Site Scripting (XSS) vulnerability Affected: through 2.8.12 |
| CVE-2025-62973 | 5.3 | Oct 27 | WordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerability Affected: through 2.10.2 |
| CVE-2024-5149 | 5.3 | Jun 5 | BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness Affected: through 2.8.9 |
| CVE-2024-1158 | 4.3 | Mar 13 | Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization Affected: before 2.8.8 |
Showing 7