VYPR

BuddyPress XProfile Custom Image Field

by Alex Githatu

CVEs (1)

  • CVE-2025-48158HigAug 20, 2025
    risk 0.56cvss 8.6epss 0.00

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Alex Githatu BuddyPress XProfile Custom Image Field buddypress-xprofile-image-field allows Path Traversal.This issue affects BuddyPress XProfile Custom Image Field: from n/a through…