Plugin icon

WP User Profile Avatar

wp-user-profile-avatar
Plugin closed

Vulnerabilities:

5

Last Updated:

January 15, 2025

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-06-19
Title
WP User Profile Avatar <= 1.0.6 - Missing Authorization
Fixed in
No known fix
CVSS
4.3 (medium)
Published
2025-01-15
Title
WP User Profile Avatar < 1.0.6 - Cross-Site Request Forgery to Settings Update
Fixed in
Fixed in 1.0.6
CVSS
4.3 (medium)
Published
2024-03-25
Title
WP User Profile Avatar < 1.0.2 - Contributor+ Stored XSS
Fixed in
Fixed in 1.0.2
CVSS
5.9 (medium)
Published
2023-12-29
Title
WP User Profile Avatar < 1.0.1 - Author+ Avatar Deletion/Update via IDOR
Fixed in
Fixed in 1.0.1
CVSS
2.7 (low)
Published
2023-12-28
Title
WP User Profile Avatar < 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.0.1
CVSS
6.4 (medium)