CVE · High

CVE-2020-5244 — BuddyPress [buddypress] < 5.1.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2020-5244 BuddyPress [buddypress] < 5.1.2 Exposure of Sensitive Information to an Unauthorized Actor High 7.5 < 5.1.2 5.1.2 2020-01-02

CVE-2020-5244

The REST API in BuddyPress versions prior to 5.1.2 contained a flaw that allowed unauthenticated attackers to access sensitive user information through a specific endpoint. The vulnerability was resolved in version 5.1.2 by implementing proper access controls.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.