Medium severity4.3OSV Advisory· Published Jun 27, 2025· Updated Jun 17, 2026
CVE-2025-5526
CVE-2025-5526
Description
The BuddyPress Docs WordPress plugin before 2.2.5 lacks proper access controls and allows a logged in user to view and download files belonging to another user
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
41.0-beta-2, 1.4.4, 1.5.7, …+ 1 more
- (no CPE)range: 1.0-beta-2, 1.4.4, 1.5.7, …
- cpe:2.3:a:boonebgorges:buddypress_docs:*:*:*:*:*:wordpress:*:*range: <2.2.5
- Range: <2.2.5
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/10196cd3-5bf7-4e40-a4f7-4ff2d34d516d/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.