bbPress Notify (No-Spam)

bbPress Notify (No-Spam) has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for bbPress Notify (No-Spam) has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. bbPress Notify (No-Spam) is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all bbPress Notify (No-Spam) vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2025-49962

bbPress Notify <= 2.19.5 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Plugin Profile
Latestv3.0.3

bbPress Notify (No-Spam)

Vinny

Author

Vinny

4.8(39)
96/100
Last Updated
2026-03-11 (6mo ago)
Active Installs
2,000+
Downloads
295,754
Requires WP
3.1+
Requires PHP
7.4+
Tested up to
WP 6.9.7
Created
2013-02-24 (14y ago)

bbPress Notify (No-Spam) is the ultimate notification plugin for bbPress and BuddyBoss forums. It replaces the limited default subscription system with a flexible, no-spam solution that gives your users personalized, reliable email updates about new topics and replies. Stop flooding inboxes. With bbpnns you control exactly who gets notified, when, and how. Perfect for community managers, membership sites, and anyone who wants professional-grade forum notifications. Key Features 📧 Send professional emails — Choose HTML, plain text, or multipart with image support. 🎯 Target the right audience — Notify by user roles (admins, moderators, members, etc.). 🚀 Faster performance — Background notifications prevent post-submission timeouts. 🧪 Preview before sending — Dry-run mode shows exactly who will receive notifications. 🔌 Developer-friendly — Dozens of filters and actions for easy customization. ✅ BuddyBoss compatible — Works out of the box with BuddyBoss forums. 📖 View the full documentation 💡 Looking for advanced features like digests, reply-by-email, and membership integrations? See bbPress Notify Premium Premium Add-Ons Take bbpnns to the next level with powerful extensions: Reply by Email – Post new topics or replies directly from your inbox. Bulk Mailer – Send notifications to thousands of users reliably — no timeouts, no dropped emails. Digests – Give users daily, weekly, or monthly summaries to reduce inbox noise. Opt-Out – One-click unsubscribe options for CAN-SPAM and CASL compliance. Membership & LMS Bridges – Running a membership or LMS site? Keep notifications in sync with your access control layer. Supports BuddyPress, MemberPress, LearnDash, AccessAlly, Private Groups, and more. 👉 Browse all premium add-ons here: bbPress Notify Premium

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C