Description
WordPress Plugin WooCommerce BuddyPress Integration is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently perform a variety of the plugin's actions or even take over a website. WordPress Plugin WooCommerce BuddyPress Integration version 3.2.5 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 3.2.6 or latest
References
Related Vulnerabilities
Drupal Core 6.x Multiple Vulnerabilities (6.0 - 6.37)
WordPress Plugin Ultimate Reviews PHP Object Injection (2.0.18)
WordPress Plugin WooCommerce Export Orders and More Cross-Site Scripting (2.0.10)
phpMyAdmin Other Vulnerability (CVE-2006-1678)
Oracle Database Server CVE-2013-3789 Vulnerability (CVE-2013-3789)