Known vulnerabilities in bbPress 2.6-rc-6

Vendor: JJJ
Software: bbPress
Version: 2.6-rc-6
Software CPE: cpe:2.3:a:johnjamesjacoby:bbpress:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 3
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting bbPress version 2.6-rc-6 bbPress 2.6-rc-6 is affected by 3 vulnerabilities: 1 high, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105441 - Cross-Site Request Forgery (CSRF)
CVE-2025-1435
CWE-352 Low
No
No
2.6.12 07.03.2025 SB2025030718
#VU28541 - Permissions, Privileges, and Access Controls
CVE-2020-13693
CWE-264 High
Public exploit available
No
2.6.5 03.06.2020 SB2020060307
#VU28540 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-13487
CWE-79 Low
No
No
2.6.5 03.06.2020 SB2020060307