← Database

CVE-2024-4750

MEDIUM CVSS: 5.3 Published: 2024-06-04 Modified: 2026-06-17

Description

The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private post by manipulating the ID included in the request

Affected Platforms

Buddyboss Buddyboss

Weakness Type

CWE-639

References