Buddydev Buddypress Xprofile Custom Field Types
1 CVEs affecting Buddydev Buddypress Xprofile Custom Field Types. Latest disclosed: 2026-01-06. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-14997 | High | 8.8 | 2026-01-06 | The BuddyPress Xprofile Custom Field Types plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delet… |