WordPress Plugin Vulnerabilities

User Photo < 0.9.5.2 - XSS

Description

The User Photo WordPress plugin was affected by a XSS security vulnerability.

Affects Plugins

Plugin icon
user-photo
Fixed in 0.9.5.2

References

CVE
CVE-2012-2920
URL
https://exchange.xforce.ibmcloud.com/vulnerabilities/75496

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
a67599ed-48df-46dc-96e6-80c478d67eaf

Timeline

Publicly Published
2012-05-10 (about 14 years ago)
Added
2019-08-26 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2026-04-16
Title
MagOne < 9.1 - Reflected Cross-Site Scripting
Published
2015-07-23
Title
Flash Player Plugin <= 1.3 - Multiple Cross-Site Scripting (XSS)
Published
2024-06-10
Title
SiteOrigin Widgets Bundle < 1.62.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via SiteOrigin Blog Widget
Published
2012-06-28
Title
Job Manager < 0.7.19 - Multiple XSS
Published
2022-11-17
Title
Ultimate Tables <= 1.6.5 - Reflected Cross-Site Scripting