onedesigns
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| One User Avatar | User Profile Picture | 1 | – | Aug 28, 2026 |
Exploited and recent CVEs
- CVE-2026-18983 One User Avatar | User Profile Picture <= 2.5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter 0.9%