WordPress plugin
Inline Image Upload for BBPress security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium1
- Low0
All Inline Image Upload for BBPress vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Subscriber+) Arbitrary File Upload ≤1.1.19Update to 1.1.20 | CVE-2025-2006 | |
| Medium4.3 | Cross-Site Request Forgery via hm_bbpui_admin_page ≤1.1.18Update to 1.1.19 | CVE-2023-51668 |
- High8.8Authenticated (Subscriber+) Arbitrary File Upload
≤1.1.19Update to 1.1.20
- Medium4.3Cross-Site Request Forgery via hm_bbpui_admin_page
≤1.1.18Update to 1.1.19
Inline Image Upload for BBPress: common questions
Does Inline Image Upload for BBPress have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Inline Image Upload for BBPress: 1 high, 1 medium. None are known to affect version null.
How do I check which version of Inline Image Upload for BBPress I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Inline Image Upload for BBPress vulnerability?
CVE-2025-2006, published Mar 28, 2025: Inline Image Upload for BBPress <= 1.1.19 - Authenticated (Subscriber+) Arbitrary File Upload. Severity: High (CVSS 8.8).
Is any Inline Image Upload for BBPress vulnerability listed in CISA KEV?
No. None of the known Inline Image Upload for BBPress vulnerabilities is currently listed in the CISA KEV catalog.