← CVE Intelligence

CVE-2023-6384

WP User Profile Avatar < 1.0.1 - Author+ Avatar Deletion/Update via IDOR PUBLISHED

Description (CNA)

The WP User Profile Avatar WordPress plugin before 1.0.1 does not properly check for authorisation, allowing authors to delete and update arbitrary avatar

Affected (CNA)

Vendor / productVersions
Unknown / WP User Profile Avataraffected 0 before 1.0.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.