All 2 CVE vulnerabilities found in BuddyPress XProfile Custom Image Field, with AI-generated Chinese analysis, references, and POCs.
Vendor: Alex Githatu
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-120518 | BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler CWE-22 | 9.1 | Critical | 2026-11-03 |
| CVE-2025-48158 | WordPress BuddyPress XProfile Custom Image Field Plugin <= 3.0.1 - Arbitrary File Deletion Vulnerability CWE-22 | 8.6 | High | 2025-08-20 |
All 2 known CVE vulnerabilities affecting BuddyPress XProfile Custom Image Field with full Chinese analysis, references, and POCs where available.