kalengi BuddyPress XProfile Custom Image Field

• CVE-2026-120518 Critical 9.1 BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler 0.8%