BuddyPress.org

We noticed that the latest version, 14.5.4, has a high priority Deserialization of untrusted data vulnerability. Here is the link to Patchstack that details the vulnerability: https://patchstack.com/database/wordpress/plugin/buddypress/vulnerability/wordpress-buddypress-plugin-14-5-0-authenticated-subscriber-php-object-injection-vulnerability. We wanted to bring this to your attention because the current version of the plugin is vulnerable and there there is currently no update that patches the issue. Please issue an update to the plugin that patches the issue and let us know when the vulnerability is patched. Thanks very much!