Now officially on WordPress.org

CVE Database / CVE-2025-62022

CVE · High

CVE-2025-62022 — BuddyPress [buddypress] < 14.4.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-62022 BuddyPress [buddypress] < 14.4.0 Missing Authorization High 7.5 < 14.4.0 14.4.0 2025-09-27 —

CVE-2025-62022

A security flaw exists in the BuddyPress plugin for WordPress, where an essential permission verification is absent from one of its functions across all iterations prior to version 14.3.5, potentially allowing malicious individuals without authentication to execute a prohibited operation. This oversight compromises the integrity of the affected systems.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings