Test ID:	1.3.6.1.4.1.25623.1.0.127427
Category:	General
Title:	WordPress bbPress Plugin < 2.6.5 Multiple Vulnerabilities
Summary:	The WordPress plugin 'bbPress' is prone to multiple; vulnerabilities.
Description:	Summary: The WordPress plugin 'bbPress' is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2020-13487: Authenticated stored cross-site scripting (XSS) via the forums list table - CVE-2020-13693: Unauthenticated Privilege Escalation issue when New User Registration is enabled. Affected Software/OS: WordPress bbPress plugin prior to version 2.6.5. Solution: Update to version 2.6.5 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-13487 https://bbpress.org/ https://codex.bbpress.org/releases/ https://wordpress.org/plugins/bbpress/#developers https://www.youtube.com/watch?v=3rXP8CGTe08 Common Vulnerability Exposure (CVE) ID: CVE-2020-13693 http://packetstormsecurity.com/files/157885/WordPress-BBPress-2.5-Privilege-Escalation.html https://bbpress.org/blog/2020/05/bbpress-2-6-5-is-out/
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.