donmik

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

donmik records in CISA KEV

No donmik vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2018-15533 CVE-2018-25308 · GHSA-jh9r-r8pc-j886

BuddyPress Xprofile Custom Fields Type 2.6.3 Arbitrary File Deletion

HIGH 73

BuddyPress Xprofile Custom Fields Type 2.6.3 contains an arbitrary file deletion vulnerability that allows authenticated users to delete arbitrary files by manipulating unescaped POST parameters.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0045 Published 2026-04-29 No fix listed CWE-22

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0