BuddyPress Restrictions Plugin Missing Authorization Vulnerability Allowing Unauthenticated Tracking Opt-In/Out
Vulnerability
A vulnerability exists in the Restrictions for BuddyPress WordPress plugin, all versions through 1.5.2, due to a lack of proper capability checks in the handle_optin_optout() function. This flaw allows unauthenticated users to manipulate tracking preferences, opting in or out of tracking without authorization.
Impact
Exploitation of this vulnerability allows for unauthorized changes to tracking status, potentially disrupting user tracking or analytics processes.
Added: Nov 18, 2025, 10:27 AM
Updated: Nov 18, 2025, 2:56 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
7.4remediation
0.0relevance
1.1threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.