bbP topic count
bbP topic count has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for bbP topic count has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Muhammad Yudha - DJ. bbP topic count is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-60163bbp topic count <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
bbP topic count
Author
Robin W
This plugin for bbpress shows any combination of the total topics, replies and total count under the avatar or within the post content on each topic/reply view in bbpress, and allows you to label these as you wish eg “Topics Created : 253″ or “Topics – 253″ You can choose to link the number counts to each user’s profile page (topics, replies, and engagements) or just display the number counts without links. Additionally 3 shortcodes are included that allow display of the counts of the logged in user [display-topic-count] [display-reply-count] [display-total-count] [display-top-users] which can be used on pages see the settings shortcodes tab for details Works with bbpress 2.5 onwards
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C