Vulnerabilities / BuddyPress Member Reviews
BuddyPress Member Reviews vulnerabilities
Advisories WPSec published for Wbcom Designs – BuddyPress Member Reviews. Other sources may list more. Its attack surface: BuddyPress Member Reviews on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-10 | WPSEC-2026-0751 | BuddyPress Member Reviews <= 3.8.0 - Authenticated (Subscriber+) Missing Authorization to Moderation Bypass via Review Update | Medium 4.3 | 3.8.1 |
| 2026-10-10 | WPSEC-2026-0750 | BuddyPress Member Reviews <= 3.8.0 - Unauthenticated Sensitive Information Exposure via Review Pages, Single Review View and Member Widgets | Medium 5.3 | 3.8.1 |
| 2026-10-10 | WPSEC-2026-0749 | BuddyPress Member Reviews <= 3.8.0 - Authenticated (Subscriber+) Missing Authorization to Review Submission Role Restriction Bypass | Medium 4.3 | 3.8.1 |
| 2026-10-10 | WPSEC-2026-0748 | BuddyPress Member Reviews <= 3.8.0 - Authenticated (Contributor+) Missing Authorization to Review Approval and Report Dismissal | Medium 4.3 | 3.8.1 |
License: CC BY 4.0