BX
Product
BuddyPress Xprofile Custom Field Types
2
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add BuddyPress Xprofile Custom Field Types to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-116868 New | 8.8 | Oct 29 | WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerability Affected: through 1.3.1 |
| CVE-2025-14997 | 8.8 | Jan 6 | BuddyPress Xprofile Custom Field Types <= 1.2.8 - Authenticated (Subscriber+) Arbitrary File Deletion Affected: through 1.2.8 |
Showing 2