Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2025-01-24	CVE-2024-11913	Server-Side Request Forgery (SSRF) vulnerability in Buddydev Activity Plus Reloaded for Buddypress The Activity Plus Reloaded for BuddyPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 1.1.1 via the 'ajax_preview_link' function. network low complexity buddydev CWE-918	5.4

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.