buddypress_xprofile_custom_fields_type vulnerabilities

CVEs whose affected-version data names the buddypress_xprofile_custom_fields_type package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2018-25308High· 8.8PoC

6mo ago

BuddyPress Xprofile Custom Fields Type 2.6.3 Arbitrary File Deletion

BuddyPress Xprofile Custom Fields Type 2.6.3 contains an arbitrary file deletion vulnerability that allows authenticated users to delete arbitrary files by manipulating unescaped POST parameters. Attackers can modify the field_hiddenfile…

▾ Midnightdonmik · Buddypress Xprofile Custom Fields TypeEPSS 0.45%via CVEORG