CVE-2026-76124 | BuddyBoss App Plugin up to 3.2.1 on WordPress File Upload send_feedback race condition

November 3, 2026 Yanac

A vulnerability labeled as critical has been found in BuddyBoss App Plugin up to 3.2.1 on WordPress. This issue affects the function send_feedback of the component File Upload. Executing a manipulation can lead to race condition.

This vulnerability appears as CVE-2026-76124. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More