Kalengi Buddypress Xprofile Custom Image Field
1 CVEs affecting Kalengi Buddypress Xprofile Custom Image Field. Latest disclosed: 2026-11-03. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-120518 | Critical | 9.1 | 2026-11-03 | The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0. This is due to b… |