Vulnerabilities / GD bbPress Attachments
GD bbPress Attachments vulnerabilities
Advisories WPSec published for forumAttachments for bbPress. Other sources may list more. Its attack surface: GD bbPress Attachments on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-26 | WPSEC-2026-1669 | GD bbPress Attachments <= 4.9.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Attachment Deletion | Medium 5.4 | 5.0 |
| 2026-10-26 | WPSEC-2026-1668 | GD bbPress Attachments <= 4.9.4 - Authenticated (Subscriber+) Missing Authorization to Restricted File Upload | Medium 4.3 | 5.0 |
License: CC BY 4.0