← CVE Intelligence

CVE-2024-4750

BuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment PUBLISHED

Description (CNA)

The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private post by manipulating the ID included in the request

Affected (CNA)

Vendor / productVersions
Unknown / buddyboss-platformaffected 0 before 2.6.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.