CVE-2023-6384: Authorization Bypass Through User-Controlled Key

The WP User Profile Avatar WordPress plugin before 1.0.1 does not properly check for authorisation, allowing authors to delete and update arbitrary avatar...

PT-2024-14944

Name of the Vulnerable Software and Affected Versions WP User Profile Avatar WordPress plugin version 1.0.0 and earlier Description The issue allows authors to delete and update arbitrary avatars due to improper authorization checks. Recommendations For WP User Profile Avatar WordPress plugin...