WordPress plugin
Activity Reactions For Buddypress security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium2
- Low0
All Activity Reactions For Buddypress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Cross-Site Request Forgery ≤1.0.22No patch available | CVE-2022-45074 |
- High8.8Cross-Site Request Forgery
≤1.0.22No patch available
Activity Reactions For Buddypress: common questions
Does Activity Reactions For Buddypress have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Activity Reactions For Buddypress: 1 high, 2 medium. At least one is not fixed in the latest version.
How do I check which version of Activity Reactions For Buddypress I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Activity Reactions For Buddypress vulnerability?
CVE-2025-31006, published Apr 10, 2025: Activity Reactions For Buddypress <= 1.0.22 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any Activity Reactions For Buddypress vulnerability listed in CISA KEV?
No. None of the known Activity Reactions For Buddypress vulnerabilities is currently listed in the CISA KEV catalog.