Vulnerability — CVE-2023-6384

CVE-2023-6384

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-6384
Description:: The WP User Profile Avatar WordPress plugin before 1.0.1 does not properly check for authorisation, allowing authors to delete and update arbitrary avatar
Last updated date:: 01/26/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 01/26/2024
Reference url to background: https://wpscan.com/vulnerability/fbdefab4-614b-493b-a9ae-c5aeff8323ef/