Skip to content
Sign in
2.7 Low

CVE-2026-61971 Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile Picture…

Description

Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile Picture metronet-profile-picture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Profile Picture: from n/a through <= 2.6.3.

Affected products and versions

Product Affected versions Fixed in
User Profile Picture 2.6 earliest → 2.6.3 No fix stated

Other CVEs of User Profile Picture

The 2 CVEs of User Profile Picture →
CVE-2024-5639 The User Profile Picture plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to,… 4.3 Medium
Track this CVE