Wpexperts User Avatar Reloaded
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Wpexperts User Avatar Reloaded.
By the Year
In 2026 there have been 0 vulnerabilities in Wpexperts User Avatar Reloaded. User Avatar Reloaded did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 1 | 5.40 |
It may take a day or so for new User Avatar Reloaded vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Wpexperts User Avatar Reloaded Security Vulnerabilities
WordPress User Avatar Plugin <1.2.2 Vulnerable to Stored XSS via Shortcode Attributes
CVE-2023-4798
5.4 - Medium
- October 16, 2023
The User Avatar WordPress plugin before 1.2.2 does not properly sanitize and escape certain of its shortcodes attributes, which could allow relatively low-privileged users like contributors to conduct Stored XSS attacks.
XSS
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Wpexperts User Avatar Reloaded or by Wpexperts? Click the Watch button to subscribe.
