← Back to CVE List
CVE-2014-1889
The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrary groups by leveraging a missing permissions check.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt