Version 2.2.6 is a BuddyPress security release.
For Version 2.2.6, the database version (bp_db_version in wp_options) was 9181, and the Trac revision was r11505.
- Improved nonce protection for some front-end AJAX endpoints.
- Nonce protection for XProfile group & field actions.
- Nonce protection for canceling email change.
- Improve nonce checks for activity favoriting/unfavoriting.
See blog post https://buddypress.org/2017/03/buddypress-2-8-2-security-release/.