medium4.3
CVE-2023-6384
The WP User Profile Avatar WordPress plugin before 1.0.1 does not properly check for authorisation, allowing authors to delete and update arbitrary avatar
Impact
The WP User Profile Avatar WordPress plugin before 1.0.1 does not properly check for authorisation, allowing authors to delete and update arbitrary avatar
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wp-Eventmanager | User Profile Avatar | before 1.0.1 |