4.3
Medium
CVE-2023-6384 The WP User Profile Avatar WordPress plugin before 1.0.1 does not properly check for authorisation, allowing authors…
Description
The WP User Profile Avatar WordPress plugin before 1.0.1 does not properly check for authorisation, allowing authors to delete and update arbitrary avatar
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP User Profile Avatar 1.0 | earliest → < 1.0.1 | 1.0.1 |