User Profile Picture

Explore User Profile Picture vulnerabilities across all versions. Currently tracking 1 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all User Profile Picture vulnerabilities before they are exploited.

Vulnerability Records

1 records


2024-06-20 00:00	User Profile Picture <= 2.6.1 - Authenticated (Author+) Insecure Direct Object Reference to Profile Picture Update User Profile Picture <= 2.6.1	`CVE-2024-5639`	4.3 Medium	JoanClarke2	Yes

Showing 1–1 of 1 reports

Latestv2.6.4

User Profile Picture

Author

Cozmoslabs

4.6(59)

92/100

Last Updated

2026-07-09 (20d ago)

Active Installs

40,000+

Downloads

1,050,986

Requires WP

5.0+

Requires PHP

5.6+

Tested up to

WP 7.0.2

Created

2012-05-09 (14y ago)

User Profile Picture is no longer under active development, but will continue to work as is. We have integrated the current functionality in Profile Builder where it will actively be maintained, and we recommend migrating to it. Set or remove a custom profile image for a user using the standard WordPress media upload tool. View Documentation and Examples Users must have the ability to upload images (typically author role or greater). You can use the plugin Profile Builder to allow other roles (e.g. subscribers) the ability to upload images. A template tag is supplied for outputting to a theme and the option to override a user’s default avatar is also available. Documentation and Feedback See the documentation on GitHub. Please Rate the Plugin.

View on WordPress.org