https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:33:20 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-50144 cnvd-2021-50144 https://cve.radiocsirt.org/vuln/cnvd-2021-50144 https://cve.radiocsirt.org/vuln/euvd-2026-22159 EUVD-2026-22159 https://cve.radiocsirt.org/vuln/euvd-2026-22159 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21389 <p>BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it&#39;s possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint. The vulnerability has been fixed in BuddyPress 7.2.1. Existing installations of the plugin should be updated to this version to mitigate the issue.</p> <p>BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it&#39;s possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint. The vulnerability has been fixed in BuddyPress 7.2.1. Existing installations of the plugin should be updated to this version to mitigate the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21389 https://cve.radiocsirt.org/vuln/ghsa-m6j4-8r7p-wpp3 <p><strong>Affected:</strong> Packagist: buddypress/buddypress</p> <p>### Impact It&#39;s possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the BuddyPress REST API members endpoint.</p> <p>### Patches The vulnerability has been fixed in BuddyPress 7.2.1. Existing installations of the plugin should be updated to this version to mitigate the issue.</p> <p>### References https://buddypress.org/2021/03/buddypress-7-2-1-security-release/</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [HackerOne](https://hackerone.com/wordpress)</p> <p><strong>Affected:</strong> Packagist: buddypress/buddypress</p> <p>### Impact It&#39;s possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the BuddyPress REST API members endpoint.</p> <p>### Patches The vulnerability has been fixed in BuddyPress 7.2.1. Existing installations of the plugin should be updated to this version to mitigate the issue.</p> <p>### References https://buddypress.org/2021/03/buddypress-7-2-1-security-release/</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [HackerOne](https://hackerone.com/wordpress)</p> https://cve.radiocsirt.org/vuln/ghsa-m6j4-8r7p-wpp3 https://cve.radiocsirt.org/vuln/gsd-2021-21389 gsd-2021-21389 https://cve.radiocsirt.org/vuln/gsd-2021-21389