one-user-avatar
WordPress · Plugin
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| One User Avatar | User Profile Picture <= 2.5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter | one-user-avatar | WordPress | High | Fix reported | |
| One User Avatar <= 2.3.6 - Stored Cross-Site Scripting | one-user-avatar | WordPress | Medium | Fix reported | |
| One User Avatar <= 2.3.6 - Cross-Site Request Forgery | one-user-avatar | WordPress | Medium | Fix reported |