bbPress

Explore bbPress vulnerabilities across all versions. Currently tracking 6 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all bbPress vulnerabilities before they are exploited.

Vulnerability Records

6 records


2025-03-04 00:00	bbPress <= 2.6.11 - Cross-Site Request Forgery to Limited Privilege Escalation bbPress <= 2.6.11	`CVE-2025-1435`	6.3 Medium	Brian Mungai	Yes
2020-05-28 00:00	bbPress <= 2.6.4 - Unauthenticated Privilege Escalation bbPress <= 2.6.4	`CVE-2020-13693`	9.8 Critical	hoangkien1020	Yes
2020-05-28 00:00	bbPress <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting via the forums list table bbPress <= 2.6.4	`CVE-2020-13487`	4.8 Medium	binit	Yes
2017-11-13 00:00	bbPress < 2.5.13 - Unauthenticated Blind SQL Injection bbPress < 2.5.13	`N/A`	8.3 High	Slavco Mihajloski	Yes
2016-07-13 00:00	bbPress <= 2.5.9 - Cross-Site Scripting bbPress <= 2.5.9	`N/A`	4.7 Medium	psych0tr1a	Yes
2016-05-03 00:00	bbPress < 2.5.9 - Stored Cross-Site Scripting bbPress < 2.5.9	`N/A`	7.2 High	Marc-Alexandre Montpas	Yes

Showing 1–6 of 6 reports

Latestv2.6.14

bbPress

Author

John James Jacoby

3.9(342)

78/100

Last Updated

2025-07-02 (1y ago)

Active Installs

100,000+

Downloads

9,331,273

Requires WP

6.0+

Requires PHP

5.6.20+

Tested up to

WP 6.9.5

Created

2010-01-13 (17y ago)

Are you looking for a timeless, elegant, and streamlined discussion board? bbPress is easy to integrate, easy to use, and is built to scale with your growing community. bbPress is intentionally simple yet infinitely powerful forum software, built by contributors to WordPress.

View on WordPress.org