CVE-2023-51477: Buddyboss Dmcc Buddyboss Theme

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper Authentication vulnerability in BUDDYBOSS DMCC BuddyBoss Theme allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BuddyBoss Theme: from n/a through 2.4.60.

Affected products

• Buddyboss Dmcc Buddyboss Theme: up to and including 2.4.60

Published 2024-04-24. Last modified 2026-06-17.