onedesigns One User Avatar | User Profile Picture

• CVE-2026-18983 High 7.5 One User Avatar | User Profile Picture <= 2.5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter 0.9%