CVE-2023-6384

Summary

CVE-2023-6384 is a vulnerability affecting the WP User Profile Avatar plugin for WordPress. Before version 1.0.1, the plugin fails to adequately verify authorization, granting authors the ability to delete and modify arbitrary avatars for other users, potentially leading to serious privacy issues and unauthorized modifications.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.