CVE-2025-12391 | Restrictions for BuddyPress Plugin up to 1.5.2 on WordPress Status Update handle_optin_optout authorization

November 17, 2025 Yanac

A vulnerability was found in Restrictions for BuddyPress Plugin up to 1.5.2 on WordPress. It has been rated as problematic. Affected by this vulnerability is the function handle_optin_optout of the component Status Update Handler. The manipulation leads to missing authorization.

This vulnerability is uniquely identified as CVE-2025-12391. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More