Skip to content
Threat Feed
Subscribe

Product

One User Avatar | User Profile Picture (<= 2.5.4)

1 brief RSS
high advisory

Stored XSS and RCE vulnerability in One User Avatar WordPress Plugin

The One User Avatar | User Profile Picture WordPress plugin versions 2.5.4 and earlier contain a stored XSS and RCE vulnerability via improper file type validation in the avatar upload process.

One User Avatar | User Profile Picture
2t 1c