CVE-2021-21389 Scanner
Detects 'Privilege Escalation' vulnerability in BuddyPress plugin for WordPress affects v. from 5.0.0 before 7.2.1.
Used 3k times · 3.4k assets checked · domain, ipv4, subdomain
CVE
CVE-2021-21389
8.1
CVSShigh
Exploitable remotely over the internet · low-privilege account sufficient.
Description
BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint. The vulnerability has been fixed in BuddyPress 7.2.1. Existing installations of the plugin should be updated to this version to mitigate the issue.
Attack Vector
Network
Privileges Req.
Low
User Interaction
None
buddypress
Updated Oct 24, 2026View on NVD →
S4E scanner
CVE history: buddypress
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →