CVE-2026-61971 | Cozmoslabs User Profile Picture Plugin up to 2.6.3 on WordPress authorization

July 13, 2026 Yanac

A vulnerability classified as problematic has been found in Cozmoslabs User Profile Picture Plugin up to 2.6.3 on WordPress. This affects an unknown part of the component User Profile. The manipulation leads to authorization bypass.

This vulnerability is listed as CVE-2026-61971. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More