A SQL Injection vulnerability exists in BuddyPress up to version 14.5.2. This flaw allows an attacker with low privileges to perform blind SQL injection attacks, potentially leading to high confidentiality impact and limited availability impact without requiring user interaction.