Report

Should I Use BuddyBoss?

buddyboss.com·Analyzed 11 hours ago·9/19/2026·Based on 13 sources

Create an online school with everything you need to provide a powerful learning experience for your students.

Depends

Buy if you run a serious course or paid community and are comfortable owning WordPress hosting and patching.

Powerful WordPress community+courses platform, but real breach history, CVEs, renewal traps, and self-hosting burden.

Confidence: Medium

4.7/5

Trustpilot rating

900 reviews

5.0/5

WPBeginner rating

961 reviews

$349/yr

Plus plan price

renewals reported at $465

50,000+

Scale

communities built

Value for money

Strong feature bundle, but renewal jumps sting

Ease of use

Capable, but WordPress setup isn't beginner-easy

Feature depth

Community, courses, memberships, mobile app bundled

Support quality

4.7 Trustpilot, but refund disputes reported

Security posture

Auth bypass, RCE CVE, 309+ sites breached

Pros

All-in-one: community, courses, memberships on WordPress^⁶
Native mobile app available
Used by 50,000+ communities^²
Strong ratings: 4.7/5 Trustpilot, 5.0/5 WPBeginner^¹
Integrates with LearnDash and membership plugins

Cons

Multiple CVEs including auth bypass and potential RCE¹⁰
Real attack compromised 309+ sites; Stripe keys stolen^⁸
Surprise $465 renewal reported; refund refused^⁴
Self-hosted WordPress: you manage hosting, updates, backups^⁶
Performance questions at high concurrent users^⁵

Gotchas

highRenewal trap: one user hit a $465 surprise renewal with refund refused^⁴
highActive exploitation observed in the wild; patch security releases immediately^⁸
mediumSelf-hosted: you own hosting, backups, and emergency security patching^⁶
mediumScalability under many concurrent users is unproven; load-test before launch^⁵

Best for

Course creators selling programs
Paid membership communities
WordPress-based businesses
Coaches wanting branded mobile apps

Not for

Anyone unwilling to run and patch WordPress hosting
Teams nervous about payment data after the 309-site breach
Budget-sensitive solo creators — renewals jump
People wanting a hosted, zero-setup platform

Pricing

BuddyBoss Plus

$349/yr

Community plus courses
For communities that scale

All-in-One Bundle

Not shown in sources

Theme, Platform Pro, extras bundled
One licence covers products

Security

Concerning record: multiple CVEs plus a live attack breaching 309+ sites and stealing Stripe keys.

309+ sites compromised, Stripe keys stolenOngoing attack against live BuddyBoss servers compromised hundreds of websites and exfiltrated Stripe API keys.^⁸
CVE-2026-56032 — PHP object injectionPHP object injection flaw in BuddyBoss Platform with potential for remote code execution.¹⁰
CVE-2025-1909 — authentication bypassAuthentication bypass vulnerability in the BuddyBoss Platform plugin.^⁹
Stored XSS via invitee nameAuthenticated (Subscriber+) stored cross-site scripting in BuddyBoss Platform Pro.