plugin

Buddypress Xprofile Custom Fields Type Vulnerabilities

1 known security issue reported for the Buddypress Xprofile Custom Fields Type WordPress plugin. Most recent disclosed Jan 4, 2018.

1 medium

Running Buddypress Xprofile Custom Fields Type on your site? Check whether your installed version is affected.

Scan your site free

BuddyPress Xprofile Custom Fields Type <= 2.6.3 - Arbitrary File Deletion

medium

The BuddyPress Xprofile Custom Fields Type plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 2.6.3. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with low-level privileges and above to arbitrarily dele...

CVSS:: 6.5
Affected:: up to 2.6.3
Fix:: No patched version reported
Disclosed:: Jan 4, 2018

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database