WordPress security by component
Woocommerce Custom Profile Picture
Plugin description
Woocommerce Custom Profile Picture is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 23, 2024; the highest CVE/CNA score is 9.9.
Plugin slug:
woo-custom-profile-pictureLatest vulnerability
CVE-2024-49658: Woocommerce Custom Profile Picture: Dangerous file upload
Woocommerce Custom Profile Picture is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
| Safe version |
|
||
|---|---|---|---|
| Oct 23, 2024 |
CVE-2024-49658
Woocommerce Custom Profile Picture: Dangerous file upload
Woocommerce Custom Profile Picture is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE9.9
NVDPending
|