CVE-2026-61971— WordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerability
Possible ATT&CK Techniques 1AI
T1078 · Valid AccountsAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cozmoslabs | User Profile Picture | ≤ 2.6.3 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-61971
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress User Profile Picture plugin <= 2.6.3 - Insecure Direct Object References (IDOR) vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Authorization Bypass Through User-Controlled Key vulnerability in Cozmoslabs User Profile Picture metronet-profile-picture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Profile Picture: from n/a through <= 2.6.3.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Vulnerability Title
Cozmoslabs User Profile Picture 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
cozmoslabs user profile picture是cozmoslabs个人开发者开源的一个用户头像管理插件。 Cozmoslabs User Profile Picture 2.6.3及之前版本存在授权问题漏洞，该漏洞源于通过用户可控密钥绕过授权，可能利用配置不当的访问控制安全级别，允许绕过授权攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cozmoslabs | User Profile Picture | 0 ~ 2.6.3 | - |
II. Public POCs for CVE-2026-61971
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-61971
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same vendor: Cozmoslabs
- CVE-2026-66582
WordPress TranslatePress plugin <= 3.3.2 - Cross Site Script - CVE-2026-75981
TranslatePress – Translate Multilingual sites with AI Transl - CVE-2026-15826
User Profile Builder <= 3.16.4 - Unauthenticated Authenticat - CVE-2026-66701
WordPress Profile Builder plugin <= 3.16.5 - Broken Access C - CVE-2026-18510
TranslatePress <= 3.2.6 - Unauthenticated Stored Cross-Site
Same weakness: CWE-639
- CVE-2026-77759
IDOR and missing authorization in the Prospero Flow CRM tran - CVE-2026-77776
Headroom Proxy Treats the Client-Supplied x-headroom-user-id - CVE-2026-77769
OpenPanel report.list Queries Reports by an Unverified dashb - CVE-2026-77768
OpenPanel report.get Returns Any Report by Identifier Withou - CVE-2026-62945
TREK: Cross-trip reservation title disclosure via file links
V. Comments for CVE-2026-61971
No comments yet