bbPress Voting
bbPress Voting has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 5.5 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for bbPress Voting has a vendor fix available, so running the current release closes it.
All of these findings were reported by Rio Darmawan. bbPress Voting is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2023-24403bbPress Voting <= 2.1.11.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
bbPress Voting
Author
natekinkead
This simple yet powerful plugin integrates with the bbPress forum plugin to add a new feature which allows users or visitors to vote up or down on topics and replies. Each topic and reply has a total score with an up arrow and a down arrow. This plugin uses AJAX to save the vote on-the-fly without refreshing the page. It’s also AMP compatible! Visitors can only vote once on each topic or reply. Features Included: * Show or hide (and customize) labels for up and down * Disable voting on topics or replies globally * Disable voting on specific forums * View-only score on closed topics * Sort topics and replies by voting scores * Admin bypass * GamiPress integration Pro Features Available: * Historical weighted score visualization * Accepted answers * “Who voted” avatars * Sort dropdown * Sort on weighted score * Sort on trending score * Trending topics widget * Schema for Q&A rich snippets * Voting email notification to author * Mark topics or replies with poor scores as spam Purchase bbPress Voting Pro at WP For The Win!
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C