User Profile Picture Plugin (WordPress) Update
1839Warning Date
Severity Level
Warning Number
Target Sector
4 March, 2021
● Medium
2021-2566
All
Description:
WordPress has released security update to address multiple vulnerabilities in the following plugin:
- User Profile Picture plugin
- <= 2.4.0
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Execute arbitrary code
- Obtain sensitive information
Best practice and Recommendations:
The CERT team encourages users to apply the necessary updates: