← WordPress Vulnerabilities
WordPress security by component

Restrictions for BuddyPress

Restrictions for BuddyPress is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 18, 2025; the highest CVE/CNA score is 5.3.

Plugin slug: bp-restrict

CVE-2025-12391: Restrictions for BuddyPress: A security weakness

Restrictions for BuddyPress is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedNov 18, 2025
Safe version guidanceSee mitigation notes
Safe version
Nov 18, 2025 CVE-2025-12391
Restrictions for BuddyPress: A security weakness
Restrictions for BuddyPress is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending