Skip to content

Cozmoslabs User Profile Picture

CVE-2026-61971 Low 2.7 WordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerability 0.3%
CVE-2024-5639 Medium 4.3 User Profile Picture <= 2.6.1 - Authenticated (Author+) Insecure Direct Object Reference to Profile Picture Update 0.4%