CodeablePress: Simple Frontend Profile Picture Upload

CodeablePress: Simple Frontend Profile Picture Upload has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for CodeablePress: Simple Frontend Profile Picture Upload has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by theviper17y. CodeablePress: Simple Frontend Profile Picture Upload is installed on roughly 60 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all CodeablePress: Simple Frontend Profile Picture Upload vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-53221

CodeablePress <= 1.0.0 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records


2025-08-14 00:00	CodeablePress <= 1.0.0 - Missing Authorization CodeablePress <= 1.0.0	`CVE-2025-53221`	4.3 Medium	theviper17y	No

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.0.2

CodeablePress: Simple Frontend Profile Picture Upload

Author

codeablepress

0.0(0)

0/100

Last Updated

2025-12-18 (9mo ago)

Active Installs

60+

Downloads

1,293

Requires WP

5.0+

Requires PHP

Tested up to

WP 6.9.7

Created

2024-10-31 (2y ago)

⚠️ This plugin has been retired. We’ve rebuilt this plugin from the ground up as a brand new, modern WordPress.org plugin: 👉 ChargeWP – Front-End Avatar Upload Please install and activate the new plugin to continue receiving updates and support. This version (1.0.1) now displays a migration notice and version 1.0.2 will not run the upload functionality anymore — it’s safe to keep active temporarily while switching. Why the Change? The new plugin offers improved performance and security Better WooCommerce and new block editor support Ongoing updates and future enhancements on WordPress.org Easier support and automatic updates What Happens After Updating? After updating to version 1.0.1, you’ll see a notice in your WordPress Dashboard with a one-click option to Install & Activate ChargeWP – Front-End Avatar Upload. All existing data (user profile pictures) remain after switching plugins but will not work if you go back to the old plugin.

View on WordPress.org