Vulnerabilidades do Donmik Buddypress Xprofile Custom Fields Type
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Donmik Buddypress Xprofile Custom Fields Type: 1 registro(s), com versões afetadas e correções.
CVE-2018-25308
Alta · 8.8
CWE-22 29/04/2026
BuddyPress Xprofile Custom Fields Type 2.6.3 Arbitrary File Deletion
BuddyPress Xprofile Custom Fields Type 2.6.3 contains a remote code execution vulnerability that allows authenticated users to delete arbitrary files by manipulating unescaped POST parameters. Attackers can modify the field_hiddenfile and field_deleteimg parameters during profile editing to unlink files from the server.