BuddyPress Docs plugin Improper Privilege Management

MEDIO 4.3CVE-2017-6954 · GHSA-9wf6-88x4-6xvj · Published 17/03/2017 · updated 17/06/2026

En resumen

CVE-2017-6954 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a buddypress/buddypress, buddypress (buddypress).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.1%, mayor que el 66.2% de las vulnerabilidades.
Solución: actualizar a 1.9.3 o posterior.

Package	Affected versions	Patched versions
buddypress/buddypress Packagist	`< 1.9.3`	`1.9.3`
buddypress buddypress	`≤ 1.9.2`	No fix yet

Description

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

NVD description

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

References

nvd.nist.gov/vuln/detail/CVE-2017-6954 · ADVISORY
boonebgorges/buddypress-docs commit 75293ed · WEB
wordpress.org/plugins/buddypress-docs/changelog · WEB
securityfocus.com/bid/97238 · WEB
wordpress.org/plugins/buddypress-docs/changelog · Release Notes

Más vulnerabilidades de buddypress/buddypress

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

buddypress/buddypress

Packagist

< 1.9.3

1.9.3

buddypress

≤ 1.9.2

No fix yet

Description

NVD description

Más vulnerabilidades de buddypress/buddypress

Ver todo →