BuddyForms Moderation ( Former: Review Logic )

BuddyForms Moderation ( Former: Review Logic ) has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for BuddyForms Moderation ( Former: Review Logic ) has a vendor fix available, so running the current release closes it.

BuddyForms Moderation ( Former: Review Logic ) is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.4.10.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all BuddyForms Moderation ( Former: Review Logic ) vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4

BuddyForms Moderation <= 1.4.16 - Authenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
BuddyForms Moderation ( Former: Review Logic ) banner
Latestv1.5.1

BuddyForms Moderation ( Former: Review Logic )

Themekraft

Author

Themekraft

3.7(3)
74/100
Last Updated
2023-12-27 (3y ago)
Active Installs
30+
Downloads
7,768
Requires WP
3.9+
Requires PHP
0+
Tested up to
WP 6.4.10
Created
2015-02-22 (12y ago)

Problem In WordPress it is not possible to edit a published post and save it as new draft or pending review without removing the post from the frontend. In the moment, if the post status is set to something else as published, it is removed. This makes it impossible to create a private draft or set an edited post to pending review without creating a 404. For the BuddyForms front-end editing we want to have the feature to save a private draft or set the edit post to pending review without creating a 404. With the BuddyForms Moderation Extension you can solve exactly this problem. The extension creates a new Form Builder MetaBox “Moderation” With 3 new Post Status Edit draft –> Is a new created post or a new edit draft of an existing post and only available for your editing. Awaiting Review –> You have finished editing and want your post to be moderationed and published. Approved –> Your post has been approved and is merged back to the live version. How it works: If you create a new edit draft, a new child post of your live post will be created as a duplicate of your live post. During the editing process you will edit the child post and your live version is untouched and available to the public. If you set the post to “awaiting review” and a moderationer (admin) approves your post, the post will be merged back to the live version and set to approved. This will work for all the content, custom fields and taxonomies. Video from Webzio Showcase the Plugin! Mail Notification With the BuddyForms in build Notification System you can create mail trigger notification for the different post status to let your users and Moderators know, when a new post is ready for moderation or gets approved. BuddyForms Moderation is the perfect plugin for you if you are in need of a solid frontend post editing moderation management. It doesn’t matter if you let your users create products or Kitten Story’s. It just work fine with any custom post type related plugin. The BuddyForms Moderation extension gives you full control of the user submissions without affecting the live version or even giving them the rights to edit a published post. Documentation & Support Extensive Documentation and Support All code is neat, clean and well documented (inline as well as in the documentation). The BuddyForms documentation with many how-tos is following now! If you still get stuck somewhere, our support gets you back on the right track. You can find all help buttons in your BuddyForms Settings Panel in your WP Dashboard!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C