cvedb.io
CVE-2017-6954
MEDIUM · CVSS 4.3
EPSS exploitation probability: 0%
Published 2017-03-17T09:59:00.147 · Last modified 2026-06-17T01:23:22.360

Summary

An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

Affected products

buddypress — buddypress

Does this affect you?

Add your gear to cvedb and we'll alert you only when buddypress ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.