{"id":"CVE-2026-111850","kind":"vulnerability","aliases":["CVE-2026-111850"],"related":[],"title":"BuddyPress: SQL injection flaw lets attackers query the database","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPress buddypress allows SQL Injection.This issue affects BuddyPress: from n/a through 14.5.2.","summary":"BuddyPress, a WordPress community plugin, has an SQL injection flaw in versions through 14.5.2. An attacker can inject SQL into database queries to read or change site data.","severity":"high","cvss":8.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["buddypress","other","self-hosted","wordpress"],"not_affected_if":["buddypress-not-installed"],"how_to_check":"- Check the installed BuddyPress version in the WordPress admin plugins list or with `wp plugin get buddypress --field=version`\n- Compare the result against the affected range through `14.5.2`","fix":"- Update BuddyPress to a version later than `14.5.2` (the sources do not name the fixed release; unknown)","status":"open","published_at":"2026-10-28T13:17:04+00:00","first_seen_at":"2026-10-28T13:33:00+00:00","triaged_at":"2026-10-28T13:34:00+00:00","updated_at":"2026-10-28T13:34:00+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-28T13:34:00Z","model":"claude-haiku-5-5","output":{"fix":"- Update BuddyPress to a version later than `14.5.2` (the sources do not name the fixed release; unknown)","reach":"internet","title":"BuddyPress: SQL injection flaw lets attackers query the database","impact":"high","summary":"BuddyPress, a WordPress community plugin, has an SQL injection flaw in versions through 14.5.2. An attacker can inject SQL into database queries to read or change site data.","category":"other","nicknames":[],"who_cares":["wordpress","buddypress","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker reads or alters site database contents through injected SQL","analyst_note":"Find the fixed BuddyPress version and the vulnerable endpoint or parameter in the NVD entry or the plugin changelog, and confirm whether authentication is required.","how_to_check":"- Check the installed BuddyPress version in the WordPress admin plugins list or with `wp plugin get buddypress --field=version`\n- Compare the result against the affected range through `14.5.2`","needs_analyst":true,"not_affected_if":["buddypress-not-installed"],"who_is_affected":"Sites running the BuddyPress plugin at version `14.5.2` or earlier on WordPress. The sources do not say which features or settings must be enabled to reach the flawed query, so the exposure of a given site is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00059,"input_tokens":3309,"output_tokens":519,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-111850':12A,15A '-2026':11A,14A '14.5.2':35B,76C 'affect':71C 'allow':67C 'attack':6A,37B 'buddypress':1A,16B,22B,64C,65C,66C,72C 'chang':47B 'command':59C 'communiti':25B 'cve':10A,13A 'data':49B 'databas':9A,42B 'element':54C 'flaw':4A,31B 'host':20B 'improp':50C 'inject':3A,30B,39B,61C 'injection.this':69C 'issu':70C 'let':5A 'n/a':74C 'neutral':51C 'plugin':26B 'queri':7A,43B 'read':45B 'self':19B 'self-host':18B 'site':48B 'special':53C 'sql':2A,29B,40B,58C,60C,68C 'use':55C 'version':33B 'vulner':62C 'wordpress':21B,24B","nicknames":[],"mitigations":[],"who_affected":"Sites running the BuddyPress plugin at version `14.5.2` or earlier on WordPress. The sources do not say which features or settings must be enabled to reach the flawed query, so the exposure of a given site is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T13:17:04+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111850","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111850","severity":null,"published_at":"2026-10-28T13:17:04+00:00","modified_at":"2026-10-28T13:17:04+00:00","first_seen_at":"2026-10-28T13:33:00+00:00","fetched_at":"2026-10-28T13:33:00+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}