WordPress Buddypress Xprofile Custom Image Field Vulnerabilities