World Wires · story 100599 · official · 1 source(s)

CVE-2026-120518: Critical file deletion in BuddyPress XProfile

An arbitrary file deletion vulnerability exists in the BuddyPress XProfile Image Field plugin for WordPress up to version 3.1.0.

Open in the desk

Coverage

• CVE-2026-120518: Critical file deletion in BuddyPress XProfile NVD: critical CVEs · tier A · clear net · 2026-11-03 05:18 UTC

What this site indexes