WordPress security by component
podamibe-custom-user-gravatar
podamibe-custom-user-gravatar is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 29, 2026; the highest published CVSS base score is 6.5.
Plugin slug:
podamibe-custom-user-gravatarLatest vulnerability
CVE-2026-54865: Podamibe Custom User Gravatar: Cross-site scripting
Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions. The export does not disclose the endpoint, input parameter, vulnerable function or detailed input-processing path. No additional exploit mechanics are inferred. Injected script executes in a victim browser when the affected output is rendered; the required viewer role is not disclosed. The CNA vector requires victim interaction; the specific interaction is not disclosed. The structured affected range is n/a through 1.0.8.
| Safe version |
|
||
|---|---|---|---|
| Oct 29, 2026 |
CVE-2026-54865
Podamibe Custom User Gravatar: Cross-site scripting
Subscriber Cross Site Scripting (XSS) in Podamibe Custom User Gravatar <= 1.0.8 versions. The export does not disclose the endpoint, input parameter, vulnerable function or detailed input-processing path. No additional exploit mechanics are inferred. Injected script executes in a victim browser when the affected output is rendered; the required viewer role is not disclosed. The CNA vector requires victim interaction; the specific interaction is not disclosed. The structured affected range is n/a through 1.0.8.
|
See mitigation notes |
CVE6.5
|