What’s Vulnerable › Products

onedesigns One User Avatar | User Profile Picture vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your onedesigns One User Avatar | User Profile Picture version is affected

Latest onedesigns One User Avatar | User Profile Picture vulnerabilities

• CVE-2026-18983 — One User Avatar | User Profile Picture <= 2.5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter (CVSS 7.5)