WP User Profile Avatar

Vulnerabilities 5Slug wp-user-profile-avatarLatest version 1.0.6WordPress.org →Closed

N/A Unfixed Closed

2025-06-20≤ 1.0.6

CVE-2025-49980

Medium 4.3 Closed

2025-01-16< 1.0.6

CVE-2024-10789

Medium 5.4 Closed

2024-04-15< 1.0.3

CVE-2023-6067

Medium 4.3 Closed

2024-01-22< 1.0.1

CVE-2023-6384

Medium 6.5 Closed

2024-12-28< 1.0.1

WordPress WP User Profile Avatar Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)