BuddyPress Activity Shortcode

BuddyPress Activity Shortcode has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for BuddyPress Activity Shortcode has a vendor fix available, so running the current release closes it.

All of these findings were reported by Muhammad Yudha - DJ. BuddyPress Activity Shortcode is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.9.0.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all BuddyPress Activity Shortcode vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-62760

BuddyPress Activity Shortcode <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-12-31 00:00	BuddyPress Activity Shortcode <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting BuddyPress Activity Shortcode <= 1.1.8	`CVE-2025-62760`	6.4 Medium	Muhammad Yudha - DJ	Yes

Showing 1–1 of 1 reports

Latestv1.1.9

BuddyPress Activity Shortcode

Author

BuddyDev

5.0(8)

100/100

Last Updated

2025-12-31 (9mo ago)

Active Installs

2,000+

Downloads

57,188

Requires WP

4.0+

Requires PHP

Tested up to

WP 5.9.0

Created

2015-10-15 (11y ago)

BuddyPress Activity shortcode plugin allows you to insert BuddyPress activity stream on any page/post using shortcode. It has a lot of flexibility built in the shortcode. You can customize almost all aspects of the activity list, what should be listed, how many and everything using the shortcode. This plugin does not include any css and utilizes your theme’s css for displaying the activity. If you need any help, please ask on BuddyDev support forums. We are helpful people looking forward to assist you. Features include: List all activities List activities for a user List activities for a group List activities of specific user role. Allow users to post from the page( experimental, if does not work with your theme, please let us know) All options supported by bp_has_activities are available For details, please see Documentation The simple way to use it is by including this shortcode [activity-stream ] Please make sure to check the usage instructions on the BuddyPress Activity shortcode plugin page Free & paid supports are available via BuddyDev Support Forum

View on WordPress.org