Unknown User Profile Picture vulnerabilities
- onedesigns one user avatar | user profile pictureOne User Avatar | User Profile Picture <= 2.5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter7.5 High
- onedesigns one user avatar, unknown one user avatar | user profile picture +1 moreOne User Avatar < 2.3.7 - Avatar Update via CSRF6.5 Medium
- onedesigns one user avatar, unknown one user avatar | user profile picture +1 moreOne User Avatar < 2.3.7 - Contributor+ Stored Cross-Site Scripting5.4 Medium
- cozmoslabs user profile pictureUser Profile Picture < 2.6.0 - Arbitrary User Picture Change/Deletion via IDOR5.4 Medium
- cozmoslabs user profile pictureUser Profile Picture < 2.5.0 - Sensitive Information Disclosure7.5 High