Extension WordPress
Vulnérabilités One User Avatar | User Profile Picture
Cette page rassemble les failles publiées pour One User Avatar | User Profile Picture, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de One User Avatar | User Profile Picture
2 fiches
One User Avatar <= 2.3.6 – Stored Cross-Site Scripting
The One User Avatar WordPress plugin before 2.3.7 does not escape the link and target attributes of its shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks
[*, 2.3.7)
2.3.7
20/09/2021
One User Avatar <= 2.3.6 – Cross-Site Request Forgery
The One User Avatar WordPress plugin before 2.3.7 does not check for CSRF when updating the Avatar in page where the [avatar_upload] shortcode is embed. As a result, attackers could make logged in user change their avatar via…
[*, 2.3.7)
2.3.7
20/09/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.