Tag: CVE-2026-120518

Critical CVEs

The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0.…

critical Critical CVE CVE-2026-120518

November 3, 2026