BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages

Vulnerabilities 13Slug wc4bpLatest version 3.5.0WordPress.org →

Minimum safe version

3.4.26

Update to 3.4.26 or later to address 13 fixable vulnerabilities

Latest available3.5.0 ✓

Medium 4.3

2025-03-01< 3.4.25

CVE-2024-13358

CVE EUVD Wordfence

Medium 4.3

2025-03-01< 3.4.26

WordPress WooBuddy Plugin <= 3.4.25 is vulnerable to Cross Site Request Forgery (CSRF)

EUVD Patchstack Wordfence CVE

Medium 6.3

2024-10-16< 3.4.2

Freemius SDK <= 2.4.2 - Missing Authorization Checks

CVE

High 8.8

2024-06-10< 3.4.20

CVE-2024-35726

CVE Patchstack Wordfence

High 8.8

2024-04-18< 3.4.21

CVE-2024-32603

CVE Patchstack

High 8.8

2024-03-23< 3.4.21

CVE-2024-2025

CVE Wordfence Patchstack WPScan

N/A

2023-07-19< 3.4.16

WordPress WooBuddy Plugin <= 3.4.15 is vulnerable to Cross Site Scripting (XSS)

Patchstack WPScan CVE

N/A

2023-07-18< 3.4.16

Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get

Wordfence

N/A

2019-02-25< 3.2.6.1

Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update

Wordfence

N/A

2022-03-04< 3.4.2

Freemius SDK <= 2.4.2 - Missing Authorization Checks

Wordfence

N/A

< 3.2.6

Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update

WPScan

N/A

2022-02-28< 3.4.2

WordPress WooBuddy -> WooCommerce BuddyPress Integration plugin <= 3.4.1 - Sensitive Information Disclosure vulnerability

Patchstack

N/A

2022-02-28< 3.4.2

WordPress WooBuddy -> WooCommerce BuddyPress Integration plugin <= 3.4.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Patchstack