BP Disable Activation Reloaded

BP Disable Activation Reloaded has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for BP Disable Activation Reloaded has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Nabil Irawan. BP Disable Activation Reloaded is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.9.40.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all BP Disable Activation Reloaded vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-57983

BP Disable Activation Reloaded <= 1.2.1 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records


2025-09-22 00:00	BP Disable Activation Reloaded <= 1.2.1 - Cross-Site Request Forgery BP Disable Activation Reloaded <= 1.2.1	`CVE-2025-57983`	4.3 Medium	Nabil Irawan	No

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.2.1

BP Disable Activation Reloaded

Author

Damian

5.0(19)

100/100

Last Updated

2014-08-14 (12y ago)

Active Installs

800+

Downloads

27,119

Requires WP

3.6+

Requires PHP

Tested up to

WP 3.9.40

Created

2013-08-23 (13y ago)

Based on crashutah, apeatling https://wordpress.org/plugins/bp-disable-activation/ Disables the activation email and automatically activates new users in BuddyPress under a standard WP install and WPMU (multisite). Also, automatically logs in the new user since the account is already active. Basically i updated the plugin and added some features like: -Option to turn off automatic login -Redirect options after account creation Known Bugs: -Doesn’t do the automatic login if you allow blog creation during the user creation in WPMU (multisite) Install Multiple plugins at once with WpFavs Bulk plugin installation tool, import WP favorites and create your own lists (https://wordpress.org/extend/plugins/wpfavs/) Increase your twitter followers Increase your Twitter followers with Twitter likebox Plugin (https://wordpress.org/extend/plugins/twitter-like-box-reloaded/) WordPress Social Invitations Enhance your site by letting your users send Social Invitations (http://wp.timersys.com/wordpress-social-invitations/)

View on WordPress.org