Skip to content

BuddyDev BuddyPress Xprofile Custom Field Types

CVE-2026-116868 High 8.8 WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerability 0.4%
CVE-2025-14997 High 8.8 BuddyPress Xprofile Custom Field Types <= 1.2.8 - Authenticated (Subscriber+) Arbitrary File Deletion 0.7%