PLUGIN SECURITY
Is Buddyboss Platform Pro safe?
Use remote media as the featured image and beyond.
What this plugin does
- Slug:
buddyboss-platform-pro - Author: fifu.app
- 60000+ active installs
- 92/100 rating (264 reviews on wordpress.org)
- 7345332 all-time downloads
- On WordPress.org since 2015-10-03
featuredimageremoteurlwoocommerce
Maintenance status
- Latest known version: 1.1.35
- Last updated: 2026-09-01 4:26pm GMT
- Tested up to WordPress: 7.1
- Requires PHP: 8.1+
Known vulnerabilities
1 known CVE on file for Buddyboss Platform Pro.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| — | BuddyBoss Platform Pro [buddyboss-platform-pro] < 2.7.10 | Authentication Bypass Using an Alternate Path or Channel | Critical 9.8 | < 2.7.10 | 2.7.10 | 0000-00-00 | ⚠ update needed |
| CVE-2025-1909 | BuddyBoss Platform Pro < 2.7.10 - Authentication Bypass via Apple OAuth provider | — | Unknown | < 2.7.10 | 2.7.10 | — | ⚠ update needed |
How to fix it
Keep Buddyboss Platform Pro updated — 1.1.35 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Imsanity — 200000+ active installs — 98/100 (292) — max PHP 8.4
- Firelight Lightbox — 200000+ active installs — 96/100 (357) — max PHP 8.4
- Responsive Lightbox & Gallery — 100000+ active installs — 98/100 (1999) — max PHP 8.4
- Simple Lightbox — 100000+ active installs — 86/100 (239) — max PHP <8.0
- reSmush.it : The original free image compressor and optimizer plugin — 100000+ active installs — 86/100 (165)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.