Buddyboss Platform vulnerabilities

3 known CVE vulnerabilities in Buddyboss Platform, translated and rated.

CVE-2026-39771High
The Buddyboss Platform plugin in versions <= 3.1.0 contains an SQL Injection vulnerability exploitable by a subscriber-level user.
CVE-2026-59514Critical
Buddyboss Platform versions up to 3.0.5 contain an unauthenticated SQL injection vulnerability. An attacker can remotely execute arbitrary SQL queries.
CVE-2026-56032Critical
The vulnerability in Buddyboss Platform versions up to 3.0.4 allows subscribers to perform PHP object injection. An attacker can exploit this flaw to execute arbitrary code on the server.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS