Hello,

Theres an alert from Wordfence on a new vulnerability in the plugin BuddyPress Xprofile Custom Field Types <= 1.3.1 – Authenticated (Subscriber+) PH

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/bp-xprofile-custom-field-types/buddypress-xprofile-custom-field-types-131-authenticated-subscriber-php-object-injection

Please can you let us know when to expect a fix?

Thanks