Dontdream vulnerabilities
We track 1 vulnerability in Dontdream products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Dontdream vulnerabilities
- 8.1 High severity
BP Profile Search: Improper Control of Filename for Include/Require Statement in PHP Program
The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 via the 'ajax_template' value parsed from the client-controlled 'bps_directory' cookie during BuddyPress AJAX directory requests. The bps_dir