GD bbPress Attachments
GD bbPress Attachments has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2024; all 5 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2015 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 4 of the records (80%). Other recurring categories include PHP Remote File Inclusion.
Every one of the 5 issues recorded for GD bbPress Attachments has a vendor fix available, so running the current release closes all known holes.
4 independent researchers contributed these findings, most of them (2) reported by Mallory Adams. GD bbPress Attachments is installed on roughly 6,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2015-5482GD bbPress Attachments < 2.3 - Directory Traversal
Read the full analysisVulnerability Records
GD bbPress Attachments
Author
Milan Petrovic
bbpressGD bbPress Attachments is an easy-to-use plugin for WordPress and bbPress for implementing file upload for bbPress Forums topics and replies. You can control file sizes from the main plugin settings panel, or you can change some attachments settings for each forum individually. Currently, included features: Attachments are handled through WordPress media library. Limit the number of files to upload at once. Embed a list of attached files into topics and replies. Attachment icon in the topic list for topics with attachments. Attachments icons for file types in the attachments list. Option to control if visitors can see a list of attachments. Display uploaded images as thumbnails. Control thumbnail size. Control thumbnail CLASS and REL attributes. Upload errors can be logged. Post author and administrators can see errors. Tool to clean up uploads error log entries from postmeta table. Administration: attachments count for topics and replies. Administration: metabox for settings override for forums. Administration: metabox with attachments list and errors for topics and replies. bbPress Plugin Versions GD bbPress Attachments 4.8 supports bbPress 2.6.2 or newer. Older bbPress versions are no longer supported! More free Dev4Press plugins for bbPress GD Forum Manager – quick and bulk forums and topics edit GD Members Directory – add new page with list of all forum members GD bbPress Tools – various expansion tools for forums powerSearch for bbPress – add advanced search to the bbPress topics topicPolls for bbPress – add polls to the bbPress topics Upgrade to forumToolbox for bbPress AKA: GD bbPress Toolbox Pro. The Pro version contains 63 features, with over 500 options to control the integration: Enhanced attachments features Limit file types attachments upload Add custom file types for upload BBCodes editor toolbar Report topics and replies Say thanks to forum members Various SEO features Various privacy features Enable TinyMCE editor Private topics and replies Auto closing of inactive topics Notification email control Show user stats in topics and replies Track new and unread topics Mute Forums and Users Great new responsive admin UI Setup Wizard Forum based settings overrides Edit: BuddyPress support 40 BBCodes (including Hide and Spoiler) 19 more Topics Views 9 additional widgets Many great tweaks And much, much more With more features on the roadmap exclusively for a Pro version. More information about forumToolbox for bbbPress More Premium plugins with bbPress Plugins Club
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C