← All advisories

High severity8.8NVD Advisory· Published Oct 29, 2026· Updated Oct 29, 2026

CVE-2026-116868

CVE-2026-116868

Description

Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions.

Affected products

1

WordPress/BuddyPress Xprofile Custom Field Typesllm-fuzzy
Range: <=1.3.1

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/bp-xprofile-custom-field-types/vulnerability/wordpress-buddypress-xprofile-custom-field-types-plugin-1-3-1-php-object-injection-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.