BuddyPress Groups Extras

BuddyPress Groups Extras has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for BuddyPress Groups Extras has a vendor fix available, so running the current release closes it.

All of these findings were reported by Marek Mikita. BuddyPress Groups Extras is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all BuddyPress Groups Extras vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-24538

BuddyPress Groups Extras <= 3.6.10 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records
BuddyPress Groups Extras banner
Latestv3.7.0

BuddyPress Groups Extras

Slava Abakumov

Author

Slava Abakumov

4.3(35)
86/100
Last Updated
2024-12-01 (2y ago)
Active Installs
400+
Downloads
81,442
Requires WP
6.0+
Requires PHP
7.2+
Tested up to
WP 6.7.7
Created
2011-05-16 (16y ago)
Requires Plugins
buddypressbp-classic

BuddyPress Groups doesn’t have much-predefined content inside. Forums and activities are created (or not) by users. But most of the time group creators (aka administrators) have much more to say or explain to other members of the community. BuddyPress Groups Extras will give the ability to them to create extra content. General Choose groups you want to allow custom fields and pages. Define who will have access to managing fields or pages in groups (groups admins or site admins or both). Create a predefined Set of Fields that can be imported to all groups on a site OR can be imported on a per-group basis. Tweak various options, like enabling Rich Editor. Drag-n-drop groups nav menu items as you wish (Fields and Pages can be your new group front page!). Custom Group Fields Create custom fields using various types (radios, checkboxes, dropdown select, textarea, and text). Edit fields data on Edit Group Details page in Group Admin area. Display/hide page, where all groups fields will be displayed (and rename it too). Reorder fields. Custom Group Pages Create group pages (for group FAQ or wiki, or events, or descriptions or whatever you want). Edit page data in the Group Admin area using WordPress RichEditor (with embedding content that WordPress supports!). Display/hide page, where all group pages will be displayed (and rename it too). Reorder pages. Make your groups full of possibilities!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C