CVE-2026-1373 | Easy Author Image Plugin up to 1.7 on WordPress Profile Picture author_profile_picture_url cross site scripting

February 18, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Easy Author Image Plugin up to 1.7 on WordPress. This impacts an unknown function of the component Profile Picture Handler. Performing a manipulation of the argument author_profile_picture_url results in cross site scripting.

This vulnerability is identified as CVE-2026-1373. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More