A remote SQL injection vulnerability was discovered in the Buddypress plugin of Wordpress. An attacker could exploit this vulnerability by sending a specially crafted HTTP POST request to the wp-load.php file, containing malicious SQL code in the action parameter. This could allow the attacker to execute arbitrary SQL commands on the vulnerable system.