Skip to content
OpenAdvisories

Vendor

Alex Githatu

1 known vulnerabilities.

Products

BuddyPress XProfile Custom Image Field 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2025-48158

    WordPress BuddyPress XProfile Custom Image Field Plugin <= 3.0.1 - Arbitrary File Deletion Vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Alex Githatu BuddyPress XProfile Custom Image Field buddypress-xprofile-image-field allows Path Traversal.This issue affects BuddyPress XProfile Custom Image Field…

    Alex Githatu BuddyPress XProfile Custom Image Field