HIGH Published Oct 28, 2026

CVE-2026-111850

CVE-2026-111850 published: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPress buddypress allows SQL Injection.This issue affects BuddyPress: from n/a through 14.5.2.

View full NVD advisory → ← Back to CVE watch

CVE-2026-111850

Related reading