What’s Vulnerable › Products

One User Avatar | User Profile Picture vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your One User Avatar | User Profile Picture version is affected

Latest One User Avatar | User Profile Picture vulnerabilities

• CVE-2021-24675 — One User Avatar < 2.3.7 - Avatar Update via CSRF (CVSS 6.5)
• CVE-2021-24672 — One User Avatar < 2.3.7 - Contributor+ Stored Cross-Site Scripting (CVSS 5.4)