WordPress User Avatar Vulnerabilities
Wordpress User Avatar vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Missing Authorization in WP User Profile Avatar by WordPress
CVE-2025-49980WordPressWP User Profile Avatar4.3MEDIUMCross-Site Request Forgery in WP User Profile Avatar Plugin for WordPress
CVE-2024-10789WordpressWP User Profile Avatar4.3MEDIUMCross-Site Scripting Vulnerability in Avatar 3D Creator
CVE-2024-54358WordPress3d Avatar User Profile7.1HIGHWP User Profile Avatar <= 1.0.1 - Contributor+ Stored XSS
CVE-2023-6067WordpressWP User Profile Avatar👾🟡WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-52118WordPressWP User Profile Avatar6.5MEDIUMWP User Profile Avatar < 1.0.1 - Author+ Avatar Deletion/Update via IDOR
CVE-2023-6384WordpressWP User Profile Avatar👾🟡4.3MEDIUMWordPress User Avatar Plugin <= 1.4.11 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-46621WordPressUser Avatar6.1MEDIUMUser Avatar - Reloaded < 1.2.2 - Contributor+ Stored XSS
CVE-2023-4798WordpressUser Avatar5.4MEDIUMProfilePress < 3.2.3 - Reflected Cross-Site Scripting
CVE-2021-24955WordpressUser Registration, Log...6.1MEDIUMProfilePress < 3.2.3 - Reflected Cross-Site Scripting
CVE-2021-24954WordpressUser Registration, Log...6.1MEDIUMOne User Avatar < 2.3.7 - Avatar Update via CSRF
CVE-2021-24675WordpressOne User Avatar | User...6.5MEDIUMOne User Avatar < 2.3.7 - Contributor+ Stored Cross-Site Scripting
CVE-2021-24672WordpressOne User Avatar | User...5.4MEDIUMProfilePress < 3.1.11 - Unauthenticated Cross-Site Scripting (XSS) in tabbed login/register widget
CVE-2021-24522WordpressUser Registration, Use...6.1MEDIUMProfilePress < 3.1.8 - Authenticated Stored XSS
CVE-2021-24450WordpressUser Registration, Use...4.8MEDIUM