AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-1889

MEDIUM · CVSS 6.5 EPSS 10.82%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-04-10 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-1889
Severity
MEDIUM
CVSS
6.5
EPSS
10.82%
WordPress

Original NVD Description

The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrary groups by leveraging a missing permissions check.