Is CVE-2026-111850 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-111850?

CVE-2026-111850 has a CVSS v3 severity of HIGH (8.5).

Back

CVE-2026-111850

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BuddyPress BuddyPress buddypress allows SQL Injection.This issue affects BuddyPress: from n/a through 14.5.2.