Advisories · Technology
BuddyDev BuddyPress Xprofile Custom Field Types.
Every CVE that names BuddyDev BuddyPress Xprofile Custom Field Types among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
WordPress BuddyPress Xprofile Custom Field Types plugin <= 1.3.1 - PHP Object Injection vulnerability
- BuddyDev BuddyPress Xprofile Custom Field Types
- Insecure deserialization
- CVSS 8.8 High
BuddyPress Xprofile Custom Field Types <= 1.2.8 - Authenticated (Subscriber+) Arbitrary File Deletion
- buddydev BuddyPress Xprofile Custom Field Types
- Path traversal