BuddyPress Xprofile Custom Field Types vulnerabilities
1 known vulnerability in BuddyPress Xprofile Custom Field Types from BuddyDev. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
BuddyPress Xprofile Custom Field Types: Improper Limitation of a Pathname to a Restricted Directory
The BuddyPress Xprofile Custom Field Types plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete_field' function in all versions up to, and including, 1.2.8. This makes it possible for authenticat