exploitDog

CVE-2025-48158

Опубликовано: 20 авг. 2025

Источник: nvd

CVSS3: 8.6

EPSS Низкий

Описание

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Alex Githatu BuddyPress XProfile Custom Image Field allows Path Traversal. This issue affects BuddyPress XProfile Custom Image Field: from n/a through 3.0.1.

Ссылки

https://patchstack.com/database/wordpress/plugin/buddypress-xprofile-image-field/vulnerability/wordpress-buddypress-xprofile-custom-image-field-plugin-3-0-1-arbitrary-file-deletion-vulnerability?_s_id=cve

EPSS

Процентиль: 17%

0.00054

Низкий

8.6 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

GHSA-fw2c-m258-65f8

CVSS3: 8.6

github

6 месяцев назад

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Alex Githatu BuddyPress XProfile Custom Image Field allows Path Traversal. This issue affects BuddyPress XProfile Custom Image Field: from n/a through 3.0.1.

EPSS

Процентиль: 17%

0.00054

Низкий

8.6 High

CVSS3

Дефекты

CWE-22