Known Vulnerabilities for One User Avatar by Onedesigns
Listed below are 2 of the newest known vulnerabilities associated with "One User Avatar" by "Onedesigns".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-126061 json | Winter CMS is a content management system built on the Laravel PHP framework. From 1.2.13 until 1.2.14, the Backend\Controlle... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-122317 json | SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account... | Not Provided | 2026-11-05 | 2026-11-05 |
| CVE-2026-120514 json | The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'zpm_profile_picture' pa... | Not Provided | 2026-11-07 | 2026-11-07 |
| CVE-2026-119473 json | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in properfraction ProfilePress wp... | Not Provided | 2026-11-07 | 2026-11-09 |
| CVE-2026-105628 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchronization flow fetches avatar_url... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104976 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEA_HOST only for its URL scheme and does ... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-104968 json | Plane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/{slug}/entity-search/?query_type=user_me... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104962 json | Plane is an open-source project management tool. Prior to 1.4.0, GET /api/v1/workspaces/{slug}/projects/{project_id}/members/... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104003 json | The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and ... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-97344 json | The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar ... | Not Provided | 2026-10-03 | 2026-10-03 |