Unrated

BuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment

CVE-2024-4750 First seen on SecPulse Jun 4, 2024

Original description The description as published by the source.

The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private post by manipulating the ID included in the request

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
report wpscan.com

Key facts

Severity: Unrated
Published: Jun 4, 2024
First seen on SecPulse: Jun 4, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:56