← Back

User Profile Avatar

user_profile_avatar

Vendor: Wp Eventmanager • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-6384
1Wp Eventmanager
1User Profile Avatar
Jun 11, 2025
Jan 22, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The WP User Profile Avatar WordPress plugin before 1.0.1 does not properly check for authorisation, allowing authors to delete and update arbitrary avatar