plugin

Buddypress Extended Friendship Request Vulnerabilities

2 known security issues reported for the Buddypress Extended Friendship Request WordPress plugin. Most recent disclosed Jul 29, 2013.

1 medium

Running Buddypress Extended Friendship Request on your site? Check whether your installed version is affected.

Scan your site free

BuddyPress Extended Friendship Request [buddypress-extended-friendship-request] < 1.0.2

unknown

[en] Cross-site scripting (XSS) vulnerability in the BuddyPress Extended Friendship Request plugin before 1.0.2 for WordPress, when the "Friend Connections" component is enabled, allows remote attackers to inject arbitrary web script or HTML via the friendship_request_message parameter to wp-admin/admin-ajax.php. NOTE...

Affected:
up to 1.0.2
Fixed in:
1.0.2
Disclosed:
Jul 29, 2013

CVE-2013-4944 on NVD →

BuddyPress Extended Friendship Request < 1.0.2 - Cross-Site Scripting

medium

Cross-site scripting (XSS) vulnerability in the BuddyPress Extended Friendship Request plugin before 1.0.2 for WordPress, when the "Friend Connections" component is enabled, allows remote attackers to inject arbitrary web script or HTML via the friendship_request_message parameter to wp-admin/admin-ajax.php. NOTE: som...

CVSS:
6.1
Affected:
up to 1.0.2
Fixed in:
1.0.2
Disclosed:
Jul 3, 2013

CVE-2013-4944 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database