User profile picture
This hub aggregates every CVE we track for User profile picture, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
4
CVEs tracked
0
Critical
1
High
0
In CISA KEV
Severity distribution
MEDIUM2LOW1HIGH1
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
2024-092026-08
Latest CVEs
The 4 most recently published vulnerabilities affecting User profile picture.
- CVE-2026-61971WordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerability2.7
- CVE-2024-5639User Profile Picture <= 2.6.1 - Authenticated (Author+) Insecure Direct Object Reference to Profile Picture Update4.3
- CVE-2021-24473User Profile Picture < 2.6.0 - Arbitrary User Picture Change/Deletion via IDOR5.4
- CVE-2021-24170User Profile Picture < 2.5.0 - Sensitive Information Disclosure7.5
Product normalization is registry-driven with AI assist and human review. How it works