kalengi

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

kalengi records in CISA KEV

No kalengi vulnerabilities are listed in CISA KEV.

1 record

TI-2026-84136 CVE-2026-120518 · GHSA-cjfm-vrh6-rjxq

MEDIUM 47

The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00779 Published 2026-11-03 No fix listed CWE-22