Buddypress Activity Plus

buddypress-activity-plus

Vendor: Incsub • 1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-9455 1Incsub 1Buddypress Activity Plus Nov 21, 2024 Oct 7, 2019 N/A· v4 8.1 HIGH· v3 7.8 HIGH· v2 The buddypress-activity-plus plugin before 1.6.2 for WordPress has CSRF with resultant directory traversal via the wp-admin/admin-ajax.php bpfb_photos[] parameter in a bpfb_remove_temp_images action.