BuddyPress Docs plugin Improper Privilege Management

MÉDIO 4.3CVE-2017-6954 · GHSA-9wf6-88x4-6xvj · Published 17/03/2017 · updated 17/06/2026

Em resumo

CVE-2017-6954 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta buddypress/buddypress, buddypress (buddypress).
Chance de exploração nos próximos 30 dias (EPSS): 1.1%, maior que 66.2% das vulnerabilidades.
Correção: atualize para 1.9.3 ou posterior.

Package	Affected versions	Patched versions
buddypress/buddypress Packagist	`< 1.9.3`	`1.9.3`
buddypress buddypress	`≤ 1.9.2`	No fix yet

Description

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

NVD description

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

References

nvd.nist.gov/vuln/detail/CVE-2017-6954 · ADVISORY
boonebgorges/buddypress-docs commit 75293ed · WEB
wordpress.org/plugins/buddypress-docs/changelog · WEB
securityfocus.com/bid/97238 · WEB
wordpress.org/plugins/buddypress-docs/changelog · Release Notes

Mais vulnerabilidades de buddypress/buddypress

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

buddypress/buddypress

Packagist

< 1.9.3

1.9.3

buddypress

≤ 1.9.2

No fix yet

Description

NVD description

Mais vulnerabilidades de buddypress/buddypress

Ver tudo →