{"id":"CVE-2026-39771","published":"2026-10-06T09:17:49.590","lastModified":"2026-10-06T15:04:25.990","description":"Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions.","cvssScore":8.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/buddyboss-platform/vulnerability/wordpress-buddyboss-platform-plugin-3-1-0-sql-injection-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A SQL injection vulnerability in Buddyboss Platform allows authenticated subscribers to execute arbitrary SQL commands, potentially leading to data exposure and privilege escalation. This affects versions up to 3.1.0.","exploitability":"Moderately difficult to exploit as it requires an authenticated subscriber account with specific API access, but the attack surface is relatively narrow with predictable parameters.","blast_radius":"The vulnerability could allow a compromised subscriber account to read sensitive user data, modify database records, and potentially escalate privileges to administrator level across multiple sites using the same platform.","remediation":"Upgrade to Buddyboss Platform version 3.1.1 or later to remediate this SQL injection vulnerability.","detection":"Monitor for unusual database query patterns in application logs that include SQL injection payloads, particularly around user subscription and profile data access endpoints.","tags":["sql-injection","web","authenticated","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:54:34.894Z"}}