[ Vendor · 2 CVEs ]
BuddyBoss
CVEs affecting BuddyBoss published in the last 30 days, plus any BuddyBoss CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-76124 | 3 Nov 2026 | CVSS 8.8 | BuddyBoss AppThe BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.2.1 via the send_feedback… | |
| CVE-2026-118082 | 29 Oct 2026 | CVSS 8.8 | Buddyboss PlatformSubscriber Privilege Escalation in Buddyboss Platform <= 3.5.0 versions. |