CVE Intelligence

John James Jacoby bbPress vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting John James Jacoby bbPress: 2 record(s), with affected versions and fixes.

CVE-2026-62137 Medium · 5.3 CWE-862 Sep 11, 2026
WordPress bbPress plugin <= 2.6.14 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in bbPress <= 2.6.14 versions.
CVE-2026-74010 Medium · 5.3 CWE-862 Aug 31, 2026
WordPress bbPress plugin <= 2.6.14 - Broken Access Control vulnerability
Missing Authorization vulnerability in John James Jacoby bbPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects bbPress: from n/a through 2.6.14.