Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

1 matching record.

1. 23
   CVE NVD 22h ago

   The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Name in all versions up to, and including, 3.6.0…

   The BuddyBoss Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Name in all versions up to, and including, 3.6.0 due to insufficient input sanitization and output escaping. This makes it…

   CVSS 6.4 CVE-2026-96554 Boss Media Web platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Boss+Media&limit=100. RSS for this section: feed.xml.