CVE-2024-4750 — BuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment
The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private post by manipulating the ID included in the request
Published: 2024-06-04 · CVSS: 5.3 · CVSS 3.1
The buddyboss-platform WordPress plugin before 2.6.0 contains an IDOR vulnerability that allows a user to like a private post by manipulating the ID included in the request
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7