Sploitus

2 exploited vulnerabilities in One User Avatar

Vulnerabilities with publicly known exploits

Vendors
WordPress
With known exploits
2
Affected Onedesigns One User Avatar versions
< 2.3.7

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2021-24675 1 exploit
CVSS 6.5 MEDIUM 2021-10-18FIX AVAILABLE
One User Avatar < 2.3.7 - Avatar Update via CSRF
CVE-2021-24672 1 exploit
CVSS 5.4 MEDIUM 2021-10-18FIX AVAILABLE
One User Avatar < 2.3.7 - Contributor+ Stored Cross-Site Scripting