What’s Vulnerable › Products

BuddyDev Activity Plus Reloaded for BuddyPress vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your BuddyDev Activity Plus Reloaded for BuddyPress version is affected

Latest BuddyDev Activity Plus Reloaded for BuddyPress vulnerabilities

• CVE-2025-62949 — WordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-30957 — WordPress Activity Plus Reloaded for BuddyPress plugin <= 1.1.2 - Broken Access Control Vulnerability (CVSS 5.4)
• CVE-2024-11913 — Activity Plus Reloaded for BuddyPress <= 1.1.1 - Authenticated (Subscriber+) Blind Server-Side Request Forgery (CVSS 5.4)