What’s Vulnerable › Vulnerabilities

CVE-2017-6954

• Severity: medium (CVSS 4.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-03-17 · updated 2026-06-17
• Weakness: CWE-269

Description

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

Affected products

• BuddyPress: through 1.9.2

References

• http://www.securityfocus.com/bid/97238
• https://github.com/boonebgorges/buddypress-docs/commit/75293ed4e5f31f04e54689bfe2c647e3e3f5e1a9
• https://wordpress.org/plugins/buddypress-docs/changelog/
• http://www.securityfocus.com/bid/97238
• https://github.com/boonebgorges/buddypress-docs/commit/75293ed4e5f31f04e54689bfe2c647e3e3f5e1a9
• https://wordpress.org/plugins/buddypress-docs/changelog/

Get alerted when CVE-2017-6954 or the next vulnerability affects your stack