WordPress Plugin BuddyPress Security Bypass (6.3.0)

Description

WordPress Plugin BuddyPress is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently add a style attributes to "span" and "p" elements in possible rich text fields of their profile page. WordPress Plugin BuddyPress version 6.3.0 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 6.4.0 or latest

References

Related Vulnerabilities

Severity

Classification

Tags