Filtered by vendor Wp-eventmanager Subscriptions
Filtered by product User Profile Avatar Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-6384 1 Wp-eventmanager 1 User Profile Avatar 2024-01-26 4.3 Medium
The WP User Profile Avatar WordPress plugin before 1.0.1 does not properly check for authorisation, allowing authors to delete and update arbitrary avatar