← CVE Intelligence

CVE-2024-12767

BuddyBoss platform < 2.7.60 - Private Comment Exposure via IDOR PUBLISHED

Description (CNA)

The buddyboss-platform WordPress plugin before 2.7.60 lacks proper access controls and allows a logged-in user to view comments on private posts

Affected (CNA)

Vendor / productVersions
Unknown / buddyboss-platformaffected 0 before 2.7.60

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.