Known vulnerabilities in Unknown One User Avatar | User Profile Picture
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2021-24675 | The One User Avatar WordPress plugin before 2.3.7 does not check for CSRF when updating the Avatar in page where the… | Not rated | Oct 18, 2021 |
| CVE-2021-24672 | The One User Avatar WordPress plugin before 2.3.7 does not escape the link and target attributes of its shortcode,… | Not rated | Oct 18, 2021 |