[Jesse Merandy]

I am trying to upgrade Buddy Press due to the new security vulnerability here: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/buddypress/buddypress-1410-authenticated-subscriber-directory-traversal

However, there is no way to do this through the Dashboard and when I try to update via CPANEL it knocks out my site. Most of the errors seem to be with the CBOX theme. I am wondering if you have see this issue elsewhere and if you have any advice on moving forward.  I am running the latest version of WordPress and Buddypress 14.0.1

[Ray]

Hi Jesse,

Regarding:

However, there is no way to do this through the Dashboard and when I try to update via CPANEL it knocks out my site. Most of the errors seem to be with the CBOX theme.

About the problem with CBOX Theme, are you able to access your server’s PHP error log? If you are able to, can you post the entries related to CBOX Theme?

Regarding the BuddyPress vulnerability, that is only specific to the “Take Webcam” photo functionality. Until the CBOX team is able to publish an update to upgrade BuddyPress for CBOX Classic, you can disable the “Take Webcam” functionality with the following code snippet in wp-content/plugins/bp-custom.php or in a wp-content/mu-plugins/ file (if you have one):

add_filter( 'bp_avatar_use_webcam', '_return_false' );

If you have any questions on how to apply this snippet, let me know.

[Author]

Posts