WordPress security by component
Buddypress Force Password Change
Plugin description
Buddypress Force Password Change is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Apr 24, 2025; the highest CVE/CNA score is 4.2.
Plugin slug:
buddy-press-force-password-changeLatest vulnerability
CVE-2025-3793: Buddypress Force Password Change: Privilege escalation or authentication bypass
Buddypress Force Password Change is affected by privilege escalation or authentication bypass. Exploitation requires at least subscriber-level access. A successful request can grant permissions or access that the caller should not possess.
| Safe version |
|
||
|---|---|---|---|
| Apr 24, 2025 |
CVE-2025-3793
Buddypress Force Password Change: Privilege escalation or authentication bypass
Buddypress Force Password Change is affected by privilege escalation or authentication bypass. Exploitation requires at least subscriber-level access. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE4.2
NVDPending
|