WordPress plugin
bbPress Move Topics security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High2
- Medium1
- Low0
All bbPress Move Topics vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting ≤1.1.6No patch available | CVE-2025-49959 | |
| High8.8 | PHP Object Injection ≤1.1.4Update to 1.1.6 | CVE-2018-21005 | |
| High8.8 | Cross-Site Request Forgery <1.1.5Update to 1.1.5 | CVE-2018-21006 |
- Medium6.1Reflected Cross-Site Scripting
≤1.1.6No patch available
- High8.8PHP Object Injection
≤1.1.4Update to 1.1.6
- High8.8Cross-Site Request Forgery
<1.1.5Update to 1.1.5
bbPress Move Topics: common questions
Does bbPress Move Topics have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in bbPress Move Topics: 2 high, 1 medium. At least one is not fixed in the latest version.
How do I check which version of bbPress Move Topics I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent bbPress Move Topics vulnerability?
CVE-2025-49959, published Jul 16, 2025: bbPress Move Topics <= 1.1.6 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any bbPress Move Topics vulnerability listed in CISA KEV?
No. None of the known bbPress Move Topics vulnerabilities is currently listed in the CISA KEV catalog.