{"action":"Upgrade buddypress/buddypress to 5.1.2 or later.","affected":[{"fixed":"5.1.2","introduced":"0"}],"component":"buddypress/buddypress","cve_ids":["CVE-2020-5244"],"ecosystem":"Packagist","epss":0.02443,"exploited":false,"fixed_versions":["5.1.2"],"ghsa_id":"GHSA-3j78-7m59-r7gv","id":"tcs_01M5KET1C5DHATAYSND16KJHV4","modified_at":"2026-07-08T06:00:43.850493142Z","published_at":"2020-02-24T17:18:26Z","references":["https://osv.dev/vulnerability/GHSA-3j78-7m59-r7gv","https://github.com/buddypress/BuddyPress/security/advisories/GHSA-3j78-7m59-r7gv","https://nvd.nist.gov/vuln/detail/CVE-2020-5244","https://github.com/buddypress/BuddyPress/commit/39294680369a0c992290577a9d740f4a2f2c2ca3","https://buddypress.org/2020/01/buddypress-5-1-2"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-3j78-7m59-r7gv","url":"https://osv.dev/vulnerability/GHSA-3j78-7m59-r7gv"}],"summary":"Private data exposure via REST API in BuddyPress"}