Known Vulnerabilities for One User Avatar by Onedesigns
Listed below are 2 of the newest known vulnerabilities associated with "One User Avatar" by "Onedesigns".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-91849 json | A security flaw has been discovered in WuzhiCMS up to 4.1.0. This affects the function member::setAvatar of the file /index.p... | Not Provided | 2026-09-15 | 2026-09-17 |
| CVE-2026-80203 json | The getgrav/grav-plugin-api plugin before 1.0.18 does not enforce API-key scope in the requireNotSuperTarget() function in Us... | Not Provided | 2026-08-26 | 2026-08-28 |
| CVE-2026-79717 json | A server-side request forgery (SSRF) vulnerability was found in galaxy_ng, the Ansible Galaxy server plugin for Pulp. An auth... | Not Provided | 2026-08-25 | 2026-08-27 |
| CVE-2026-72594 json | A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated ... | Not Provided | 2026-08-10 | 2026-08-10 |
| CVE-2026-67204 json | BookStack before 26.05.4 contains a broken access control vulnerability that allows authenticated API users with image-update... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-66047 json | ProfilePress (wp-user-avatar) WordPress plugin before 4.17.2 contains an unauthenticated remote code execution vulnerability ... | Not Provided | 2026-08-31 | 2026-09-02 |
| CVE-2026-58654 json | The Grav API plugin (getgrav/grav-plugin-api) 1.0.0 contains an unrestricted file upload vulnerability in the avatar upload e... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-57676 json | Authorization Bypass Through User-Controlled Key vulnerability in Matteo Manna Simple User Avatar allows Exploiting Incorrect... | Not Provided | 2026-06-29 | 2026-07-08 |
| CVE-2026-55497 json | Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the built-in thumbnail and avatar image decod... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-54256 json | Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, the bac... | Not Provided | 2026-08-26 | 2026-08-27 |