Version 2.6.4 is a BuddyPress security release.
For Version 2.6.4, the database version (bp_db_version in wp_options) was 10993, and the Trac revision was r11501.
- Improved nonce protection for some front-end AJAX endpoints.
- Nonce protection for XProfile group & field actions.
- Nonce protection for canceling email change.
- Improve nonce checks for activity favoriting/unfavoriting.
See blog post https://buddypress.org/2017/03/buddypress-2-8-2-security-release/.