[Robin W]

I haven’t looked at this one for several years, so no idea if it works or is any good

Inline Image Upload for BBPress

[Danishsard]

I’ll test soon to see if it works—specifically, whether the password changes to the corresponding WordPress hash when someone logs in. Or does it work differently now?

[Robin W]

Have you looked at

bbp style pack

It has loads of features for bbpress.

[Danishsard]

I think bbPress has huge development potential; it is also the most deeply integrated with WordPress. It would be great to see it evolve—perhaps along the lines of other forum solutions that offer comprehensive feature bundles.

It’s a great forum platform, though highly underrated because the core package lacks extensive features. In my view, however, it holds the greatest potential to evolve into a fantastic tool for enriching WordPress sites.

[Fabio Plugins]

Tanks, feel free to use the free version : https://wordpress.org/plugins/fabio-ai-chatbot-lite/.

[specialworld83]

Introducing Aurora bbPress 1.0!

Aurora is a modern forum template plugin developed by CodeLinSoft to completely redesign the appearance and user experience of bbPress without replacing your existing WordPress theme.

Designed with a clean, elegant, and responsive interface, Aurora makes it easier to discover discussions, interact with other members, and build an engaging online community.

MAIN FEATURES

• Modern, responsive interface for desktop, tablet, and mobile.

• Redesigned homepage with forum categories, community statistics, and active members.

• Dedicated recent discussions page with search, filters, and topic previews.

• Modern topic layouts with author information, discussion statistics, and an interactive timeline.

• SCEditor WYSIWYG editor with XHTML support.

• Integrated image and file attachments.

• Customizable user profiles with avatars and cover images.

• Configurable discussion badges and member rankings.

• Automatic topic subscriptions and notifications with an unread counter and dropdown.

• Customization options available directly from WordPress Admin.

• Multilingual interface with 12 included languages.

COMPATIBILITY

Aurora works as an independent WordPress plugin, preserving the underlying bbPress discussion system and your existing WordPress theme.

Version: 1.0

WordPress: 6.4 or later

PHP: 7.4 or later

Requires: bbPress

License: CodeLinSoft Proprietary License

DISCOVER AURORA

Explore its features, view the interface previews, and get the plugin from the official website:

Aurora bbPress – Official Product Page

Feedback, suggestions, and feature requests are welcome!

Developed by CodeLinSoft.

[Robin W]

@jgasba Thanks for posting, the original thread was old, but exactly the right place for you to add your comments.

So the subscribe/unsubscribe features in profile refer to the user accessing the profile. So if you go into a users bbpress profile, then there is a subscriptions tab, but this is for you (as admin/keymaster in your case) to ‘also’ subscribe/unsubscribe, it does not allow you to subscribe/unsubscribe a user.

You can manage subscriptions using the bbp style pack additional plugin (which has lots of other stuff you can amend in bbpress)

so Install

bbp style pack

once activated go to

dashboard>settings>bbp style pack>Subscription Management
and activate, and follow the explanation there of how to manage subscitions for users, forums and topics

[Robin W]

Thanks for your support ticket in the style pack plugin.

I have done an update which should be live in a few hours – WordPress are now delaying releases so that moderators and security scanners can review changes before they reach users.

If anyone needs a release quicker, you can download from the WordPress site

bbp style pack

[John James Jacoby]

Sorry to hear about all of that.

I’ve fixed the phpBB importer, and I’m quickly auditing the other importers for similar problems.

See: https://bbpress.trac.wordpress.org/ticket/3683

2.6.18 will include these fixes.

[John James Jacoby]

bbPress 2.6.17 is a security and maintenance release that improves permissions, private content handling, subscription notifications, moderation workflows, and forum counts. Everyone running bbPress should update as soon as possible.

Read the release announcement and get bbPress 2.6.17 from WordPress.org.

[Robin W]

Install

bbp style pack

once activated go to

dashboard>settings>bbp style pack>Topic/Reply Display

and items 17, 18 & 19 will let you set what you want

[Peter]

Can you please help with an update to fix this security issue?
https://patchstack.com/database/wordpress/plugin/bbpress/vulnerability/wordpress-bbpress-plugin-2-6-14-broken-access-control-vulnerability

[stracy2]

Is someone working a patch or fix?

Wordfence gives alerts to this issue.

patchstack, credited with finding this CVE:

States “This security issue has a low severity impact and is unlikely to be exploited.” and has no vPatch. Here is that report.

[crzyhrse]

bbPress <= 2.6.14 – Missing Authorization
Wordfence Intelligence > Vulnerability Database > bbPress <= 2.6.14 – Missing Authorization
5.3
Missing Authorization
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVE CVE-2026-74010
CVSS 5.3 (Medium)
Publicly Published August 31, 2026
Last Updated September 1, 2026
Researcher Ananda Dhakal
Description
The bbPress plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.6.14. This is due to a missing capability check on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action.

References
vdp.patchstack.com

[nooreshaal]

Thanks for sharing this fix. While working on Instatroids, we’ve also encountered similar WordPress embed issues caused by plugin conflicts. This solution is simple and helpful.

[Robin W]

You can use shortcodes instead

Shortcodes

There are also additional ones with filters in

bbp style pack

once activated go to

dashboard>settings>bbp style pack>shortcodes

[pentatonicfunk]

FILE: /bbpress/includes/common/formatting.php
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
FOUND 0 ERRORS AND 2 WARNINGS AFFECTING 2 LINES
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
 810 | WARNING | seems_utf8() has been deprecated since WordPress version 6.9.0. Use wp_is_valid_utf8() instead. (WordPress.WP.DeprecatedFunctions.seems_utf8Found)
 811 | WARNING | Function utf8_encode() is deprecated since PHP 8.2; Use mb_convert_encoding(), UConverter::transcode() or iconv instead (PHPCompatibility.FunctionUse.RemovedFunctions.utf8_encodeDeprecated)
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

[pentatonicfunk]

FILE: /bbpress/includes/admin/tools/repair.php
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
FOUND 1 ERROR AFFECTING 1 LINE
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
 372 | ERROR | The parameter "array( 'hide_empty' => false )" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter. (WordPress.WP.DeprecatedParameters.Get_termsParam2Found)
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

FILE: /bbpress/includes/common/functions.php
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
FOUND 1 ERROR AFFECTING 1 LINE
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
 532 | ERROR | The parameter "array( 'hide_empty' => true )" at position #2 of wp_count_terms() has been deprecated since WordPress version 5.6.0. Instead do not pass the parameter.
     |       | (WordPress.WP.DeprecatedParameters.Wp_count_termsParam2Found)
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

PHP 8.5
WP 7.0.1
bbpress 2.6.14

[Robin W]

Thanks for that really useful and detailed post.

My working theory would be that turnkey bbpress is adding something to the header – if another theme shows it as a lock, then that is the most likely, but I may well be incorrect !

Are you using the version on wordpress? https://wordpress.org/plugins/weaver-for-bbpress/

or where did you get it from?

It might be worth you posting the issue on

Turnkey bbPress by WeaverTheme

to see if they can help.

I am not a bbpress author, just a volunteer who tries to help here, but please do come back and I’ll see if I can help further

[laptoplife]

Thank you so much for your post and the suggestions.

Using the suggestions I have determined that this problem doesn’t occur if I use one of these options. All of the options don’t have to be used, just picking one gets rid of the issue.

1) Don’t use the closed threads option at all.
2) Deactivate the plugin Turnkey bbPress by WeaverTheme
3) Change the theme. The lock shows normally without the code being there.

But this doesn’t really solve it because I want to keep the theme and the plugin.

I assumed that there is an issue with the way the dashicons were being processed.

I added this to functions.php. It did not change anything.

I feel like perhaps there is an issue with the title formatting.

If I go to the post and click on Edit Topic, it doesn’t show any extra code in the title section. Yet I see that this <span> is being inserted into the title of the forum post (as shown above) and I think WordPress may be stripping out the code which is why it shows. I could be wrong in this, but where would I look to see how to change this.

[Robin W]

not one I’ve seen before, it could be a theme or plugin issue

Themes

As a test switch to a default theme such as twentytwenty, and see if this fixes.

Plugins

If that doesn’t work, also deactivate all plugins apart from bbpress and see if this fixes. if it does, re-enable one at a time to see which is causing the error.

If you cannot do this to your site (say because it is live) then use the ‘troubleshooting’ features of this plugin to let you test without affecting other users

Health Check & Troubleshooting

Then come back

[laptoplife]

If I close a topic, it’s nice that it shows a lock icon in the link, but when one clicks on the thread, it shows the code at the top of the page.

How do I remove this code from the title while still keeping the threads locked?

Thank you.

Wordpress 7.0
BBPress Version 2.6.14

[TechArk Solutions]

On the bbPress forum “Create New Topic” page, when the Visual editor tab is active, the TinyMCE toolbar controls (Bold, Italic, Lists, Link, Image, etc.) cannot be accessed using the Tab key.

Keyboard users are unable to navigate to or interact with the formatting toolbar, which prevents them from using editor formatting features without a mouse.

Steps to Reproduce

Navigate to a bbPress forum page.
Select Create New Topic.
Ensure the Visual editor tab is active.
Place focus in the editor area.
Press the Tab key to navigate through available controls.

Actual Result

Focus skips the TinyMCE toolbar controls.
Toolbar buttons cannot be reached or activated using keyboard navigation.
Users must use a mouse to access formatting options.

Expected Result

All toolbar controls should be reachable via keyboard navigation.
Focus order should move through each toolbar button in a logical sequence.
Users should be able to activate toolbar functions using keyboard controls (Enter/Space).

Accessibility Impact

Affects keyboard-only users.
Affects screen reader users who rely on keyboard navigation.
Prevents equal access to content authoring functionality.

WCAG Success Criteria

2.1.1 Keyboard (Level A)
2.1.2 No Keyboard Trap (Level A) (verify during testing)
2.4.3 Focus Order (Level A)
4.1.2 Name, Role, Value (Level A) (if toolbar controls lack proper accessibility attributes)

Environment

Platform: WordPress + bbPress
Component: TinyMCE Visual Editor (Create New Topic form)
Browser(s): Chrome, Edge
Assistive Technology: NVDA (if tested)

Screenshot Reference

https://prnt.sc/PJVhxYwNyVvf

[jgasba]

Thanks a bunch for taking the time to detail all that.

About translations I am trying to contribute to the official community translations for the plugin in French. I found the culprit strings and added translations for them. https://translate.wordpress.org/projects/wp-plugins/bbp-style-pack/stable/fr/default/?filters%5Bterm%5D=Moderation+Flag&filters%5Bterm_scope%5D=scope_any&filters%5Bstatus%5D=current_or_waiting_or_fuzzy_or_untranslated&filters%5Buser_login%5D=&filter=Apply+Filters&sort%5Bby%5D=priority&sort%5Bhow%5D=desc
Then of course it will only merge when 90+% is translated (and validated), is that correct?

I struggled to find it in the codebase at first because I thought it was in bbpress, my bad. It was then helpful to use the translation website. For further reference it was at the time of writing at modtools/bbpress.php#L215 (in bbp style pack plugin of course)

The most frustrating thing with plugins like bbpress/Buddypress ecosystem is undocumented features/hooks and config parameters and the difficulty it puts on users wanting to work with it or even contribute to understand everything and how each piece comes together with the rest of wordpress in a 15 year old codebase… but thanks to people like you we can go further is making those better 👍

Thanks again for the quick answers

[jgasba]

This line comes from the the bbp styling pack plugin.
https://translate.wordpress.org/projects/wp-plugins/bbp-style-pack/stable/