BuddyPress Docs plugin Improper Privilege Management

MOYENNE 4.3CVE-2017-6954 · GHSA-9wf6-88x4-6xvj · Published 17/03/2017 · updated 17/06/2026

En bref

CVE-2017-6954 est une vulnérabilité MOYENNE (CVSS 4.3) touchant buddypress/buddypress, buddypress (buddypress).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.1%, plus élevée que 66.2% des vulnérabilités.
Correctif : mettre à jour vers 1.9.3 ou plus récent.

Package	Affected versions	Patched versions
buddypress/buddypress Packagist	`< 1.9.3`	`1.9.3`
buddypress buddypress	`≤ 1.9.2`	No fix yet

Description

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

NVD description

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

References

nvd.nist.gov/vuln/detail/CVE-2017-6954 · ADVISORY
boonebgorges/buddypress-docs commit 75293ed · WEB
wordpress.org/plugins/buddypress-docs/changelog · WEB
securityfocus.com/bid/97238 · WEB
wordpress.org/plugins/buddypress-docs/changelog · Release Notes

Autres vulnérabilités de buddypress/buddypress

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

buddypress/buddypress

Packagist

< 1.9.3

1.9.3

buddypress

≤ 1.9.2

No fix yet

Description

NVD description

Autres vulnérabilités de buddypress/buddypress

Tout voir →