Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Ayecode Subscribe
Filtered by product Userswp
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-0442 1 Ayecode 1 Userswp 2022-03-11 4.0 MEDIUM 4.3 MEDIUM
The UsersWP WordPress plugin before 1.2.3.1 is missing access controls when updating a user avatar, and does not make sure file names for user avatars are unique, allowing a logged in user to overwrite another users avatar.