[ Vendor · 1 CVEs ]

BuddyDev

CVEs affecting BuddyDev published in the last 30 days, plus any BuddyDev CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-116868 29 Oct 2026 CVSS 8.8 BuddyDev BuddyPress Xprofile Custom Field TypesSubscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions.