← All advisories

Critical severity9.8NVD Advisory· Published May 29, 2020· Updated Jun 17, 2026

CVE-2020-13693

CVE-2020-13693

Description

An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
bbpress/bbpressPackagist	< 2.6.5	2.6.5

Affected products

3

Bbpress/Bbpress
cpe:2.3:a:bbpress:bbpress:*:*:*:*:*:wordpress:*:*
Range: <2.6.5
WordPress/bbPress plugindescription
ghsa-coords
pkg:composer/bbpress/bbpress
Range: < 2.6.5

Patches

Vulnerability mechanics

References

8

packetstormsecurity.com/files/157885/WordPress-BBPress-2.5-Privilege-Escalation.htmlnvdExploitThird Party AdvisoryVDB EntryWEB
bbpress.org/blog/2020/05/bbpress-2-6-5-is-out/nvdRelease NotesVendor Advisory
codex.bbpress.org/releases/nvdRelease NotesVendor Advisory
github.com/advisories/GHSA-mwxh-6j9v-45phghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-13693ghsaADVISORY
wordpress.org/plugins/bbpress/nvdRelease NotesThird Party AdvisoryWEB
bbpress.org/blog/2020/05/bbpress-2-6-5-is-outghsaWEB
codex.bbpress.org/releasesghsaWEB

News mentions

0

No linked articles in our index yet.