Topic: BP 14.5.2 · BuddyPress.org

Skip to:: Content; Pages; Categories; Search; Top; Bottom

BP 14.5.2

@mike80222

Participant

1 day ago

Does the 14.5.2 release mitigate CVE-2026-1360?
Not sure I posted this in the right subforum. Maybe I should tag @emaralive.

Viewing 2 replies - 1 through 2 (of 2 total)

@mike80222

Participant

1 day ago

Looks like it’s not in the CVE database yet:
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/buddypress/buddypress-1450-authenticated-subscriber-php-object-injection-via-xprofile-field-data

@emaralive

Moderator

22 hours, 36 minutes ago

14.5.2 addresses an “information disclosure” vulnerability via AJAX and oEmbed for “Activity” items.

~~Out of curiosity, was your source of public disclosure for CVE-2026-1360 via Wordfence and, if not, what was your source, if you don’t mind stating?~~

You already answered, I didn’t refresh the page before sending a reply.

Viewing 2 replies - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.