← All advisories

Medium severity5.4NVD Advisory· Published Nov 12, 2023· Updated Apr 28, 2026

CVE-2023-28694

CVE-2023-28694

Description

Cross-Site Request Forgery (CSRF) vulnerability in Wbcom Designs Wbcom Designs – BuddyPress Activity Social Share plugin <= 3.5.0 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Wbcomdesigns/Buddypress Activity Social Share2 versions
cpe:2.3:a:wbcomdesigns:buddypress_activity_social_share:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:wbcomdesigns:buddypress_activity_social_share:*:*:*:*:*:wordpress:*:*range: <=3.5.0
- (no CPE)range: <=3.5.0

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/bp-activity-social-share/wordpress-wbcom-designs-buddypress-activity-social-share-plugin-3-4-0-cross-site-request-forgery-csrfnvdThird Party Advisory

News mentions

0

No linked articles in our index yet.