CVE-2026-120518 Blast Radius

CRITICAL • CVSS 9.1The BuddyPress XProfile Image Field plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 3.1.0. This is…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-120518.

Book a Demo →← Back to CVE-2026-120518