kalengi
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| BuddyPress XProfile Custom Image Field | 1 | – | Nov 3, 2026 |
Exploited and recent CVEs
- CVE-2026-120518 BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler 0.8%