{ "id": "CVE-2023-6384", "sourceIdentifier": "contact@wpscan.com", "published": "2024-01-22T20:15:47.507", "lastModified": "2024-01-22T20:28:17.417", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "The WP User Profile Avatar WordPress plugin before 1.0.1 does not properly check for authorisation, allowing authors to delete and update arbitrary avatar" } ], "metrics": {}, "references": [ { "url": "https://wpscan.com/vulnerability/fbdefab4-614b-493b-a9ae-c5aeff8323ef/", "source": "contact@wpscan.com" } ] }