PatchTheCVEbbpress vulnerabilities
Recent CVEs affecting bbpress products. 2 tracked.
bbpress has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2020-05-29. Highest priority: CVE-2020-13693 (score 69/100).
- CVE-2020-13693 CRITICAL 9.8 UPGRADE An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New
- CVE-2011-1150 MEDIUM 6.1 UPGRADE bbPress through 1.0.2 has XSS in /bb-login.php url via the re parameter.
FAQ
How do I fix bbpress vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bbpress being exploited right now?
None of the tracked bbpress CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bbpress CVE should I patch first?
CVE-2020-13693 currently ranks highest (69/100): An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New.