5.3
Medium
CVE-2023-50882 Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly…
Description
Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ProfilePress: from n/a through <= 4.13.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ProfilePress 4.13 | earliest → 4.13.2 | No fix stated |
| ProfilePress 4.13 | earliest → 4.13.2 | No fix stated |
| ProfilePress 4.13 | earliest → 4.13.2 | No fix stated |
Other CVEs of ProfilePress
The 6 CVEs of ProfilePress →
CVE-2023-41953
Missing Authorization vulnerability in ProfilePress Membership Team ProfilePress.This issue affects ProfilePress: from…
5.3
Medium
CVE-2023-41954
Improper Privilege Management vulnerability in ProfilePress Membership Team ProfilePress allows Privilege…
8.6
High
CVE-2023-23830
Unauth
7.1
High
CVE-2023-23820
Auth
6.5
Medium