Security vulnerability | WordPress.org

Resolved Robin W
(@robin-w)

3 months, 2 weeks ago

Wordfence say the current version has security issues

bbPress Notify <= 2.19.5 – Reflected Cross-Site Scripting

Viewing 6 replies - 1 through 6 (of 6 total)

Plugin Author useStrict
(@usestrict)

3 months, 2 weeks ago

Thanks. I’m looking into it.

rolfbly
(@rolfbly)

2 months, 4 weeks ago

Hi, any news on this?
Really Simple Security also triggers on this, saying in July “The bbPress Notify plugin for WordPress has a security vulnerability in versions up to 2.19.5“, which is the latest.
However, RSS refers to CVE-2025-49962 which is from October updated 13 November, which mentions “bbPress Notify plugin <= 2.19.4“.

Plugin Author useStrict
(@usestrict)

2 months, 4 weeks ago

I expect to have the fix out over the weekend.

Plugin Author useStrict
(@usestrict)

2 months, 3 weeks ago

Hi @robin-w ,

The vulnerabilities have been fixed in version 2.20.

Cheers,
Vinny

Thread Starter Robin W
(@robin-w)

2 months, 3 weeks ago

Thanks for that – much appreciated 🙂

rolfbly
(@rolfbly)

2 months, 3 weeks ago

+1 👍

Viewing 6 replies - 1 through 6 (of 6 total)

You must be logged in to reply to this topic.

8 replies
3 participants
Last reply from: rolfbly
Last activity: 2 months, 3 weeks ago
Status: resolved