Extension WordPress
Vulnérabilités User Profile Picture
Cette page rassemble les failles publiées pour User Profile Picture, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de User Profile Picture
2 fiches
User Profile Picture < 2.6.0 – Authenticated Insecure Direct Object Reference
The User Profile Picture WordPress plugin before 2.6.0 was affected by an IDOR issue, allowing users with the upload_image capability (by default author and above) to change and delete the profile pictures of other users (including those with…
[*, 2.6.0)
2.6.0
28/06/2021
User Profile Picture <= 2.4.0 – Sensitive Information Disclosure
The REST API endpoint get_users in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the upload_files capability. This included password hashes, hashed user activation keys, usernames,…
[*, 2.5.0)
2.5.0
03/03/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.