Skip to content

Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

1 matching record.

38

CVE NVD 1h ago

The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0.

The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0. This is due to bpxp_image_field_update_on_user_activation() calling unlink() on a path…

CVSS 9.1 CVE-2026-120518 Kalengi Web platform

Reuse this view

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Kalengi&limit=100. RSS for this section: feed.xml.