Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:buddyboss:app:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

BuddyBoss App: Arbitrary File Upload in send_feedback function (CVE-2026-76124)

The BuddyBoss App WordPress plugin (all versions up to and including 3.2.1) is vulnerable to Arbitrary File Upload via the send_feedback function, which may lead to remote code execution.

PoC BuddyBoss App
1c