BuddyPress Docs plugin Improper Privilege Management

MEDIUM 4.3CVE-2017-6954 · GHSA-9wf6-88x4-6xvj · Published 17/03/2017 · updated 17/06/2026

In short

CVE-2017-6954 is a MEDIUM (CVSS 4.3) vulnerability affecting buddypress/buddypress, buddypress (buddypress).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.2% of all vulnerabilities.
Fix: update to 1.9.3 or later.

Package	Affected versions	Patched versions
buddypress/buddypress Packagist	`< 1.9.3`	`1.9.3`
buddypress buddypress	`≤ 1.9.2`	No fix yet

Description

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

NVD description

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

References

nvd.nist.gov/vuln/detail/CVE-2017-6954 · ADVISORY
boonebgorges/buddypress-docs commit 75293ed · WEB
wordpress.org/plugins/buddypress-docs/changelog · WEB
securityfocus.com/bid/97238 · WEB
wordpress.org/plugins/buddypress-docs/changelog · Release Notes

More vulnerabilities in buddypress/buddypress

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

buddypress/buddypress

Packagist

< 1.9.3

1.9.3

buddypress

≤ 1.9.2

No fix yet

Description

NVD description

More vulnerabilities in buddypress/buddypress

See all →