Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:buddyboss-platform:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductBuddyboss Platform (3aa46b5a-59b8-5365-b3b2-06d0b23eac19)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-4886 vulnerable 2026-06-08 06:50:18.953428 BuddyBoss Platform < 2.6.0 - Subscriber+ Comment on Private Post via IDOR
The contains an IDOR vulnerability that allows a user to comment on a private post by manipulating the ID included in the request
Published: 2024-06-05T06:00:02.593Z
Updated: 2025-03-27T20:30:25.455Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4750 vulnerable 2026-06-08 06:50:18.553132 BuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment
The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private post by manipulating the ID included in the request
Published: 2024-06-04T06:00:02.993Z
Updated: 2025-03-27T21:11:34.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12767 vulnerable 2026-06-08 06:25:36.046785 BuddyBoss platform < 2.7.60 - Private Comment Exposure via IDOR
The buddyboss-platform WordPress plugin before 2.7.60 lacks proper access controls and allows a logged-in user to view comments on private posts
Published: 2025-05-15T20:09:40.026Z
Updated: 2025-11-13T21:06:51.959Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.