Buddyboss Platform vulnerabilities

2 known vulnerabilities in Buddyboss Platform from BuddyBoss. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  Buddyboss Platform: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-59514Jul 23, 2026BuddyBoss

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyBoss Buddyboss Platform buddyboss-platform allows Blind SQL Injection.This issue affects Buddyboss Platform: from n/a through 3.0.5.

• 9.8 Critical severity

  BuddyBoss Platform Pro: Authentication Bypass Using an Alternate Path or Channel

  CVE-2025-1909May 5, 2025BuddyBoss

  The BuddyBoss Platform Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.01. This is due to insufficient verification on the user being supplied during the Apple OAuth authenticate request through the plugin.