Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2025-05-26
CVE-2025-1780 - Buddypress Woocommerce My Account Integration Plugin
The BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wc4bp_delete_page() function in all versions up to, and including, 3.4.25. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins page setting.
PLUGIN
Buddypress Woocommerce My Account Integration
CVE-2025-1780
Risk Score
Threat Entry
Updated 2025-05-26
CVE-2024-13358 - Buddypress Woocommerce My Account Integration Plugin
The BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wc4bp_delete_page() function in all versions up to, and including, 3.4.24. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins page setting.
PLUGIN
Buddypress Woocommerce My Account Integration
CVE-2024-13358
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2024-2025 - buddypress_woocommerce_my_account_integration Theme
The "BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages" plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.4.20 via deserialization of untrusted input in the get_simple_request function. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
THEME
buddypress_woocommerce_my_account_integration
CVE-2024-2025
Risk Score