Vulnerabilities / BuddyDrive
BuddyDrive vulnerabilities
Advisories WPSec published for BuddyDrive. Other sources may list more. Its attack surface: BuddyDrive on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2427 | BuddyDrive <= 2.1.4 - Authenticated (Subscriber+) Missing Authorization to Adding Items to Other Users' Folders | Medium 4.3 | 2.1.5 |
| 2026-11-03 | WPSEC-2026-2426 | BuddyDrive <= 2.1.4 - Authenticated (Subscriber+) Sensitive Information Exposure via Group Lookup | Medium 4.3 | 2.1.5 |
| 2026-11-03 | WPSEC-2026-2425 | BuddyDrive <= 2.1.4 - Unauthenticated Sensitive Information Exposure via File Lists | Medium 5.3 | 2.1.5 |
| 2026-11-03 | WPSEC-2026-2424 | BuddyDrive <= 2.1.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary File and Folder Access and Modification via Front-End Edit and Bulk Actions | High 8.1 | 2.1.5 |
License: CC BY 4.0