[John James Jacoby]

Sorry to hear about all of that.

I’ve fixed the phpBB importer, and I’m quickly auditing the other importers for similar problems.

See: https://bbpress.trac.wordpress.org/ticket/3683

2.6.18 will include these fixes.

[joneiseman]

I’m seeing a fatal error after installing 2.6.17:
[16-Sep-2026 17:54:10 UTC] PHP Fatal error: Cannot redeclare bbp_get_component_name() (previously declared in /home/mafwor5/public_html/wp-content/plugins/bbpress/includes/extend/buddypress/functions.php:34) in /home/mafwor5/public_html/wp-content/plugins/bbpress/includes/extend/buddypress/functions.php on line 34

Looks like the file is included twice.

[Danishsard]

I chose the account migration method for bbPress; the accounts were transferred, but no one can log in. The importer stated that accounts would be automatically adjusted upon the first login attempt—but that isn’t happening; no one can log in without resetting their password.

So, one way or another, the importer doesn’t work quite as it should. It shouldn’t be so finicky, and it ought to actually deliver on what it promises—yet it fails to fully do so.

bbPress is still a great forum platform, though for some reason, it seems to have been largely abandoned by its creators.

They could create paid add-ons and turn it into a solid, comprehensive package. After all, wpForo isn’t good at all—quite the opposite. It’s a shame that bbPress isn’t really being developed by its creators anymore; they could let others step in and drive it forward if they no longer have the energy for it themselves.

[John James Jacoby]

bbPress 2.6.17 is a security and maintenance release that improves permissions, private content handling, subscription notifications, moderation workflows, and forum counts. Everyone running bbPress should update as soon as possible.

Read the release announcement and get bbPress 2.6.17 from WordPress.org.

[Robin W]

ok, sorry I don’t know phpbb and the convertor was written some time ago by someone who no longer is actively involved in bbpress.

Have a look through these

Problems when converting from phpBB to bbPress

“No users to import” when attempting to import from latest phpBB

[Robin W]

Note sure if this issue is covered in this article

phpBB

[Danishsard]

I’m trying to import everything from a phpBB forum to bbPress, but it’s not working. Users aren’t being transferred, and the posts that do get moved (I’m not sure if it’s all of them) lack an assigned author. The process keeps getting stuck in a loop at step 16 due to an error. In the end, some topics appear on the forum (maybe all of them, maybe not—I can’t tell), but there are no actual users; the posts look as if they were written by guests, even though they have various names attached. The importer never finishes; it just stays stuck on step 16, endlessly processing the same thing.

Is there any way to fix this problem?

[Robin W]

I am not a bbpress author, just a moderator on the support forum.

bbpress has been informed, and as you say patchstack says that the issue is

Low priority
No impactful threat
This security issue has a low severity impact and is unlikely to be exploited.

But of course it should be fixed.

[Robin W]

I am not a bbpress author, just a moderator on the support forum.

bbpress has been informed, and patchstack says that the issue is

Low priority
No impactful threat
This security issue has a low severity impact and is unlikely to be exploited.

But of course it should be fixed.

I am closing this thread as another exists covering the same issue

[Peter]

Can you please help with an update to fix this security issue?
https://patchstack.com/database/wordpress/plugin/bbpress/vulnerability/wordpress-bbpress-plugin-2-6-14-broken-access-control-vulnerability

[stracy2]

Is someone working a patch or fix?

Wordfence gives alerts to this issue.

patchstack, credited with finding this CVE:

States “This security issue has a low severity impact and is unlikely to be exploited.” and has no vPatch. Here is that report.

[crzyhrse]

bbPress <= 2.6.14 – Missing Authorization
Wordfence Intelligence > Vulnerability Database > bbPress <= 2.6.14 – Missing Authorization
5.3
Missing Authorization
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVE CVE-2026-74010
CVSS 5.3 (Medium)
Publicly Published August 31, 2026
Last Updated September 1, 2026
Researcher Ananda Dhakal
Description
The bbPress plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.6.14. This is due to a missing capability check on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action.

References
vdp.patchstack.com

[Touda]

Hi. We’re also interested in a basic PM funcionality for bbPress. As this thread is 5 years old, we’re wondering if there is a more recente plugin available in 2026. The bbPress Messages that Robin suggested now appears at the WP plugins directory as not having been updated in a long time. Better Messages seems to be more updated but in the free version based on Ajax it seems like a too heavy-load plugin. Have any of you tested it in a high traffic server?

[Robin W]

You can use shortcodes instead

Shortcodes

There are also additional ones with filters in

bbp style pack

once activated go to

dashboard>settings>bbp style pack>shortcodes

[pentatonicfunk]

FILE: /bbpress/includes/common/formatting.php
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
FOUND 0 ERRORS AND 2 WARNINGS AFFECTING 2 LINES
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
 810 | WARNING | seems_utf8() has been deprecated since WordPress version 6.9.0. Use wp_is_valid_utf8() instead. (WordPress.WP.DeprecatedFunctions.seems_utf8Found)
 811 | WARNING | Function utf8_encode() is deprecated since PHP 8.2; Use mb_convert_encoding(), UConverter::transcode() or iconv instead (PHPCompatibility.FunctionUse.RemovedFunctions.utf8_encodeDeprecated)
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

[pentatonicfunk]

FILE: /bbpress/includes/admin/tools/repair.php
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
FOUND 1 ERROR AFFECTING 1 LINE
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
 372 | ERROR | The parameter "array( 'hide_empty' => false )" at position #2 of get_terms() has been deprecated since WordPress version 4.5.0. Instead do not pass the parameter. (WordPress.WP.DeprecatedParameters.Get_termsParam2Found)
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

FILE: /bbpress/includes/common/functions.php
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
FOUND 1 ERROR AFFECTING 1 LINE
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
 532 | ERROR | The parameter "array( 'hide_empty' => true )" at position #2 of wp_count_terms() has been deprecated since WordPress version 5.6.0. Instead do not pass the parameter.
     |       | (WordPress.WP.DeprecatedParameters.Wp_count_termsParam2Found)
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

PHP 8.5
WP 7.0.1
bbpress 2.6.14

[Robin W]

Thanks for that really useful and detailed post.

My working theory would be that turnkey bbpress is adding something to the header – if another theme shows it as a lock, then that is the most likely, but I may well be incorrect !

Are you using the version on wordpress? https://wordpress.org/plugins/weaver-for-bbpress/

or where did you get it from?

It might be worth you posting the issue on

Turnkey bbPress by WeaverTheme

to see if they can help.

I am not a bbpress author, just a volunteer who tries to help here, but please do come back and I’ll see if I can help further

[laptoplife]

Thank you so much for your post and the suggestions.

Using the suggestions I have determined that this problem doesn’t occur if I use one of these options. All of the options don’t have to be used, just picking one gets rid of the issue.

1) Don’t use the closed threads option at all.
2) Deactivate the plugin Turnkey bbPress by WeaverTheme
3) Change the theme. The lock shows normally without the code being there.

But this doesn’t really solve it because I want to keep the theme and the plugin.

I assumed that there is an issue with the way the dashicons were being processed.

I added this to functions.php. It did not change anything.

I feel like perhaps there is an issue with the title formatting.

If I go to the post and click on Edit Topic, it doesn’t show any extra code in the title section. Yet I see that this <span> is being inserted into the title of the forum post (as shown above) and I think WordPress may be stripping out the code which is why it shows. I could be wrong in this, but where would I look to see how to change this.

[Robin W]

not one I’ve seen before, it could be a theme or plugin issue

Themes

As a test switch to a default theme such as twentytwenty, and see if this fixes.

Plugins

If that doesn’t work, also deactivate all plugins apart from bbpress and see if this fixes. if it does, re-enable one at a time to see which is causing the error.

If you cannot do this to your site (say because it is live) then use the ‘troubleshooting’ features of this plugin to let you test without affecting other users

Health Check & Troubleshooting

Then come back

[laptoplife]

If I close a topic, it’s nice that it shows a lock icon in the link, but when one clicks on the thread, it shows the code at the top of the page.

How do I remove this code from the title while still keeping the threads locked?

Thank you.

Wordpress 7.0
BBPress Version 2.6.14

[Ricsca2]

When I try to split replies, I get a 404 error.
Is this a bbpress bug? Does this happen to others?
Is there a way to do this in admin and not in fronted mode?
Thanks

[flamuren]

Hi,

I want to use these widgets when bulding my websites forum page: https://codex.bbpress.org/features/widgets/

I see Buddypress widgets, but bbpress is not showing. However I see them when editing sidebar widgets.

Is it possible to use them on normal pages also somehow?

My goal is to display the latest forum posts.

Best regards,
Flamuren

[TechArk Solutions]

Hello All,

Has anyone encountered this issue before?

On the bbPress forum “Create New Topic” page, when the Visual editor tab is active, the TinyMCE toolbar controls (Bold, Italic, Lists, Link, Image, etc.) cannot be accessed using the Tab key. Keyboard focus skips the toolbar entirely, making the formatting controls inaccessible to keyboard-only users.

If anyone has experience resolving this issue or knows of a workaround, please let me know.

Any help would be greatly appreciated.

Thank you.

[TechArk Solutions]

On the bbPress forum “Create New Topic” page, when the Visual editor tab is active, the TinyMCE toolbar controls (Bold, Italic, Lists, Link, Image, etc.) cannot be accessed using the Tab key.

Keyboard users are unable to navigate to or interact with the formatting toolbar, which prevents them from using editor formatting features without a mouse.

Steps to Reproduce

Navigate to a bbPress forum page.
Select Create New Topic.
Ensure the Visual editor tab is active.
Place focus in the editor area.
Press the Tab key to navigate through available controls.

Actual Result

Focus skips the TinyMCE toolbar controls.
Toolbar buttons cannot be reached or activated using keyboard navigation.
Users must use a mouse to access formatting options.

Expected Result

All toolbar controls should be reachable via keyboard navigation.
Focus order should move through each toolbar button in a logical sequence.
Users should be able to activate toolbar functions using keyboard controls (Enter/Space).

Accessibility Impact

Affects keyboard-only users.
Affects screen reader users who rely on keyboard navigation.
Prevents equal access to content authoring functionality.

WCAG Success Criteria

2.1.1 Keyboard (Level A)
2.1.2 No Keyboard Trap (Level A) (verify during testing)
2.4.3 Focus Order (Level A)
4.1.2 Name, Role, Value (Level A) (if toolbar controls lack proper accessibility attributes)

Environment

Platform: WordPress + bbPress
Component: TinyMCE Visual Editor (Create New Topic form)
Browser(s): Chrome, Edge
Assistive Technology: NVDA (if tested)

Screenshot Reference

https://prnt.sc/PJVhxYwNyVvf

[Kayako Saeki]

How can I link pingbacks within forum threads and in external posts together?
Sometimes I post articles to link to forum threads, topic to topic, pingbacks are useful for this, but unfortunately there are hardly any threads discussing this issue.