Threats tagged 'ghsa-6pp9-x443-r8xw'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.2%	CVE-2026-8155BuddyPress (WordPress plugin) · Insecure Direct Object Reference Medium5.4EPSS 0.2%2026-07-31CVE Database V5CVE-2026-8155 CVE-2026-8155 is a medium severity vulnerability in the BuddyPress WordPress plugin before version 14.5.0. It allows any authenticated user with Subscriber or higher privileges to bypass authorization controls on private messaging endpoints. This flaw enables unauthorized reading, modification, or deletion of other users' private messages. EPSS 0.2%Vulnerability CWE-639 #ghsa-6pp9-x443-r8xw	CVE Database V5	2026-07-31

Page 1 of 1