Plugin icon

One User Avatar | User Profile Picture

one-user-avatar

Vulnerabilities:

3

Last Updated:

August 21, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2026-08-27
Title
One User Avatar < 2.5.5 - Subscriber+ Stored XSS via 'wpua-file' Parameter
Fixed in
Fixed in 2.5.5
CVSS
7.1 (high)
Published
2021-09-20
Title
One User Avatar < 2.3.7 - Avatar Update via CSRF
Fixed in
Fixed in 2.3.7
CVSS
3.1 (low)
Published
2021-09-20
Title
One User Avatar < 2.3.7 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.7
CVSS
6.8 (medium)