wp-user-profile-avatar
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| WP User Profile Avatar <= 1.0.6 - Missing Authorization | wp-user-profile-avatar | WordPress | Medium | No fix reported | |
| WP User Profile Avatar <= 1.0.5 - Cross-Site Request Forgery to Settings Update | wp-user-profile-avatar | WordPress | Medium | Fix reported | |
| WP User Profile Avatar <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode | wp-user-profile-avatar | WordPress | Medium | Fix reported | |
| WP User Profile Avatar <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | wp-user-profile-avatar | WordPress | Medium | Fix reported | |
| WP User Profile Avatar <= 1.0.0 - Authenticated (Author+) Insecure Direct Object Reference to Avatar Deletion/Update | wp-user-profile-avatar | WordPress | Medium | Fix reported |