Log in Scan Now

All security reports

NVD security advisoryHigh

High advisory for Subscriber PHP Object Injection in Buddy

CVE-2026-116868 · Reported 29 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

Subscriber PHP Object Injection in BuddyPHP ecosystem

Advisory overview

Subscriber PHP Object Injection in BuddyPress Xprofile Custom Field Types <= 1.3.1 versions.

Related references

https://patchstack.com/database/wordpress/plugin/bp-xprofile-custom-field-types/vulnerability/wordpress-buddypress-xprofile-custom-field-types-plugin-1-3-1-php-object-injection-vulnerability?_s_id=cve

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account