Approved changes feed: RSS · Atom

cpe:2.3:a:buying_buddy:buying_buddy_idx_crm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBuying Buddy (0b4e3ea9-bf44-52a7-a7c8-ee81e5dd2891)
ProductBuying Buddy Idx Crm (98869d3a-4b51-5f6e-ac68-18d8d51f63fb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-50037 vulnerable 2026-06-08 07:31:10.263330 WordPress Buying Buddy IDX CRM plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Buying Buddy Buying Buddy IDX CRM buying-buddy-idx-crm allows DOM-Based XSS.This issue affects Buying Buddy IDX CRM: from n/a through <= 2.3.0.
Published: 2025-06-20T15:03:52.404Z
Updated: 2026-04-28T16:13:16.874Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52446 vulnerable 2026-06-08 06:52:15.202874 WordPress Buying Buddy IDX CRM plugin <= 1.2.8 - CSRF to PHP Object Injection vulnerability
HIGH (8.8)
Cross-Site Request Forgery (CSRF) vulnerability in Buying Buddy Buying Buddy IDX CRM buying-buddy-idx-crm allows Object Injection.This issue affects Buying Buddy IDX CRM: from n/a through <= 1.2.8.
Published: 2024-11-20T11:10:08.683Z
Updated: 2026-04-28T16:10:42.415Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.