Mmastodon TechnologyCybersecurity first seen 9 h ago, last 9 h ago, peak #5

BuddyPress hit by high-severity SQL injection vulnerability

Original: 🚨 EUVD-2026-112730 📊 Score: 8.5/10 (CVSS v3.1) 📦 Product: BuddyPress 🏢 Vendor: buddypress 📅 Updated: 2026-10-29 📝 Improp

A new vulnerability tracked as EUVD-2026-112730 has been published affecting BuddyPress, the WordPress community plugin. The flaw is an SQL injection weakness rated 8.5 out of 10 under CVSS v3.1, allowing blind SQL injection attacks against affected installations. The advisory was updated on 29 October 2026, and administrators running BuddyPress are being urged to review the details and patch promptly to avoid potential data compromise.

Why now: Security teams and WordPress administrators are alerting each other to a newly published high-severity flaw in a widely used plugin.

BuddyPressWordPressEUVD

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 9 h ago to 9 h ago.

Evidence

• 🚨 EUVD-2026-112730 📊 Score: 8.5/10 (CVSS v3.1) 📦 Product: BuddyPress 🏢 Vendor: buddypress 📅 Updated: 2026-10-29 📝 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPress buddypress allows Blind SQL… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4114218