Vulnerabilidades de bbPress
CVEs publicadas que afetam produtos de bbPress: 1 registro(s), com severidade, exploração e correções.
CVE-2026-110762
Baixa · 3.7
CWE-863 14/10/2026
bbPress before 2.6.19 Information Disclosure via BuddyPress Activity Stream
bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hide_sitewide ignores ancestor forum visibility. Topics and replies in public subforums nested under private or hidden parents expose title, permalink and body via the BuddyPress activity stream and REST endpoint.