CyberRota Analysis
AI-GeneratedThe BuddyPress plugin for WordPress is vulnerable due to improper handling of user-controlled XProfile field data, allowing authenticated attackers with subscriber-level access or higher to inject arbitrary PHP objects. This deserialization flaw can lead to remote code execution if exploited, posing a significant risk to affected WordPress sites. Administrators of WordPress sites using BuddyPress versions up to 14.5.0 should prioritize patching this vulnerability to mitigate potential attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The BuddyPress plugin for WordPress is vulnerable to Deserialization of Untrusted Data in all versions up to, and including, 14.5.0 This is due to the `bp_unserialize_profile_field()` function using `@unserialize()` without the `allowed_classes` parameter on user-controlled XProfile field data. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary PHP objects via XProfile textbox fields, which could lead to remote code execution if a suitable POP chain is available in the WordPress environment.