BP Email Assign Templates

BP Email Assign Templates has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.8 out of 10. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (75%). Other recurring categories include Improper Input Validation.

Every one of the 4 issues recorded for BP Email Assign Templates has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (2) reported by ch4r0n. BP Email Assign Templates is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all BP Email Assign Templates vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.8CVE-2025-28874

BP Email Assign Templates <= 1.7 - Authenticated (Admin+) Arbitrary Option Deletion

Read the full analysis

Vulnerability Records

4 records


2025-03-11 00:00	BP Email Assign Templates <= 1.7 - Authenticated (Admin+) Arbitrary Option Deletion BP Email Assign Templates <= 1.7	`CVE-2025-28874`	6.8 Medium	ch4r0n	Yes
2025-03-11 00:00	BP Email Assign Templates <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting BP Email Assign Templates <= 1.6	`CVE-2025-28875`	5.5 Medium	ch4r0n	Yes
2025-01-20 00:00	BP Email Assign Templates <= 1.5 - Reflected Cross-Site Scripting BP Email Assign Templates <= 1.5	`CVE-2025-24631`	6.1 Medium	0xd4rk5id3	Yes
2024-12-11 00:00	BP Email Assign Templates <= 1.5 - Reflected Cross-Site Scripting BP Email Assign Templates <= 1.5	`CVE-2024-12441`	6.1 Medium	vgo0	Yes

Showing 1–4 of 4 reports

Plugin Profile

Latestv1.8

BP Email Assign Templates

Author

shanebp

5.0(2)

100/100

Last Updated

2026-04-17 (5mo ago)

Active Installs

40+

Downloads

4,450

Requires WP

4.0+

Requires PHP

Tested up to

WP 6.8.8

Created

2016-03-18 (11y ago)

This BuddyPress / BuddyBoss plugin allows site administrators to assign template options to individual BuddyPress Emails. It requires BuddyPress 2.5.1 or higher. It: provides a screen for creating template options provides a meta-box for assigning template options to each BuddyPress Email filters each BuddyPress email so that it uses the assigned template It does NOT include: templates an interface for creating templates For more info on BuddyPress Emails, visit: https://codex.buddypress.org/emails/ For more info on this plugin, visit: https://www.philopress.com/products/bp-email-assign-templates/ For more BuddyPress plugins, visit: https://www.philopress.com/

View on WordPress.org