Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-39690 2 Bearne, Wordpress 2 Author Avatars List/block, Wordpress 2026-04-09 5.3 Medium
Missing Authorization vulnerability in Paul Bearne Author Avatars List/Block author-avatars allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Author Avatars List/Block: from n/a through <= 2.1.25.
CVE-2023-49846 1 Bearne 1 Author Avatars List\/block 2024-11-21 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul Bearne Author Avatars List/Block allows Stored XSS.This issue affects Author Avatars List/Block: from n/a through 2.1.17.