An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13693
Reference (s):
- http://packetstormsecurity.com/files/157885/WordPress-BBPress-2.5-Privilege-Escalation.html
- https://bbpress.org/blog/2020/05/bbpress-2-6-5-is-out/
- https://codex.bbpress.org/releases/
- https://wordpress.org/plugins/bbpress/#developers