Known Vulnerabilities for One User Avatar by Onedesigns
Listed below are 2 of the newest known vulnerabilities associated with "One User Avatar" by "Onedesigns".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-105628 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchronization flow fetches avatar_url... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104976 json | Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEA_HOST only for its URL scheme and does ... | Not Provided | 2026-10-05 | 2026-10-06 |
| CVE-2026-104968 json | Plane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/{slug}/entity-search/?query_type=user_me... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104962 json | Plane is an open-source project management tool. Prior to 1.4.0, GET /api/v1/workspaces/{slug}/projects/{project_id}/members/... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104003 json | The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and ... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-97344 json | The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar ... | Not Provided | 2026-10-03 | 2026-10-03 |
| CVE-2026-96518 json | Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Ac... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-96337 json | Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Ac... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-95866 json | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vuln... | Not Provided | 2026-09-25 | 2026-09-25 |
| CVE-2026-94534 json | lamp-cloud through 5.10.0 fails to validate user identity in PUT /anyone/baseInfo and PUT /anyone/avatar endpoints, allowing ... | Not Provided | 2026-09-21 | 2026-09-22 |