[ Vendor · 1 CVEs ]
kalengi
CVEs affecting kalengi published in the last 30 days, plus any kalengi CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-120518 | 3 Nov 2026 | CVSS 9.1 | kalengi BuddyPress XProfile Custom Image FieldThe BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0. This… |