Known vulnerabilities in bbPress 2.0-rc-5

Vendor: JJJ
Software: bbPress
Version: 2.0-rc-5
Software CPE: cpe:2.3:a:johnjamesjacoby:bbpress:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting bbPress version 2.0-rc-5 bbPress 2.0-rc-5 is affected by 5 vulnerabilities: 2 high, 3 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28541 - Permissions, Privileges, and Access Controls
CVE-2020-13693
CWE-264 High
Public exploit available
No
2.6.5 03.06.2020 SB2020060307
#VU28540 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13487
CWE-79 Low
No
No
2.6.5 03.06.2020 SB2020060307
#VU20698 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.5.9 02.09.2019 SB2016050204
#VU20685 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.5.10 02.09.2019 SB2016071312
#VU19719 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
2.5.13 02.08.2019 SB2017111308