CVE-2026-107622 - BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter
CVE ID :CVE-2026-107622 Published : 6 Nov 2026, 12:17 p.m. | 53 minutes ago Description :The BuddyForms plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.10.5 via a form-type confusion attack through the `bf_post_type` parameter. This is due to...