Plugin icon

One User Avatar | User Profile Picture

one-user-avatar

Vulnerabilities:

2

Last Updated:

January 12, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2021-09-20
Title
One User Avatar < 2.3.7 - Avatar Update via CSRF
Fixed in
Fixed in 2.3.7
CVSS
3.1 (low)
Published
2021-09-20
Title
One User Avatar < 2.3.7 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.7
CVSS
6.8 (medium)