CVE-2026-76124 - BuddyBoss App <= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback Endpoint
CVE ID :CVE-2026-76124 Published : Nov. 3, 2026, 1:17 p.m. | 1 hour, 47 minutes ago Description :The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.2.1 via the send_feedback function. This is due to insufficient file type...