low3.5
CVE-2024-12767
The buddyboss-platform WordPress plugin before 2.7.60 lacks proper access controls and allows a logged-in user to view comments on private posts
Impact
The buddyboss-platform WordPress plugin before 2.7.60 lacks proper access controls and allows a logged-in user to view comments on private posts
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Buddyboss | Buddyboss Platform | before 2.7.60 |