Log out
Get PRO

WP User Profile Avatar

  • WP User Profile Avatar on WordPress.org
  • Current version: 1.0.6
  • Last update: January 15, 2025
  • Known issues: Open

This information is sourced from wpvulnerabilities.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Submit

Vulnerabilities

  • Access violation vulnerability in WP User Profile Avatar 1.0.6

    Open

    The WordPress plugin called "WP User Profile Avatar" has a security issue that allows unauthorized people to access it. This happens because a certain function in the plugin does not check for proper...

    Read More

  • Input validation vulnerability in WP User Profile Avatar 1.0.5

    Fixed

    The WP User Profile Avatar plugin for WordPress has a security issue that affects all versions up to 1.0.5. This is because the plugin does not properly check for a special code (called a nonce) when...

    Read More

  • Input validation vulnerability in WP User Profile Avatar 1.0.1

    Fixed

    The WP User Profile Avatar plugin for WordPress has a security issue that allows hackers to insert harmful code into the website. This can happen when a user with a certain level of access inputs spe...

    Read More

  • Input validation vulnerability in WP User Profile Avatar 1.0

    Fixed

    The WP User Profile Avatar plugin for WordPress is vulnerable to a security issue known as Stored Cross-Site Scripting (XSS). This issue exists in versions up to and including 1.0 of the plugin. This...

    Read More

  • Access violation vulnerability in WP User Profile Avatar 1.0.0

    Fixed

    The WP User Profile Avatar plugin for WordPress is a vulnerable program. It has a security issue in all versions up to and including version 1.0.0. This issue is called an "Insecure Direct Object Ref...

    Read More