[High] CVE-2026-53674 – BuddyPress 14.4.0 contains a regular expression injection vulnerability in the a...
High CVE-2026-53674 BuddyPress 14.4.0 contains a regular expression injection vulnerability in the activity mention resolver that, when username compatibility mode is enabled, allows attackers to manipulate a REGEXP database clause by crafting mention names containing regex metacharacters....