Vulnerability Database

309,136

Total vulnerabilities in the database

CVE-2025-5526

The BuddyPress Docs WordPress plugin before 2.2.5 lacks proper access controls and allows a logged in user to view and download files belonging to another user

  • Published: Jun 27, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-5526
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

No CWE or OWASP classifications available.

Software From Fixed in
boonebgorges / buddypress_docs - 2.2.5