Skip to content
Threat Feed
Subscribe

Product

BuddyBoss App (<= 3.2.1)

1 brief RSS
high advisory

BuddyBoss App: Arbitrary File Upload in send_feedback function (CVE-2026-76124)

The BuddyBoss App WordPress plugin (all versions up to and including 3.2.1) is vulnerable to Arbitrary File Upload via the send_feedback function, which may lead to remote code execution.

PoC BuddyBoss App
1c