Extension WordPress
Vulnérabilités User Avatar – Reloaded
Cette page rassemble les failles publiées pour User Avatar – Reloaded, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de User Avatar – Reloaded
2 fiches
User Avatar – Reloaded <= 1.2.2 – Authenticated (Contributor+) Stored Cross-Site Scripting
The User Avatar – Reloaded plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level…
*-1.2.2
Non indiqué
28/09/2025
User Avatar – Reloaded <= 1.2.1 – Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
The User Avatar – Reloaded plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This…
*-1.2.1
1.2.2
25/09/2023
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.