bp-xprofile-custom-field-types vulnerabilities

CVEs whose affected-version data names the bp-xprofile-custom-field-types package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116868High· 8.8

1w ago

WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerability

Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions.

▾ TwilightBuddyDev · bp-xprofile-custom-field-typesEPSS 0.45%via CVEORG