Plugin icon

WP User Profile Avatar

wp-user-profile-avatar
Plugin closed

Vulnerabilities:

3

Last Updated:

February 26, 2024

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2024-03-25
Title
WP User Profile Avatar <= 1.0.1 - Contributor+ Stored XSS
Fixed in
No known fix
CVSS
5.9 (medium)
Published
2023-12-29
Title
WP User Profile Avatar < 1.0.1 - Author+ Avatar Deletion/Update via IDOR
Fixed in
Fixed in 1.0.1
CVSS
2.7 (low)
Published
2023-12-28
Title
WP User Profile Avatar < 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.0.1
CVSS
6.4 (medium)