Scott Taylor Avatar Plugin Authorization Bypass Vulnerability Allowing Insecure Direct Object References
Vulnerability
An authorization bypass vulnerability has been identified in the Scott Taylor Avatar WordPress plugin, specifically in versions through 0.1.4. This vulnerability allows for exploitation of improperly configured access control security levels, leading to insecure direct object references (IDOR).
Impact
Exploitation of this vulnerability could bypass authorization and access sensitive objects or data, taking advantage of the flawed access control mechanisms.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
4.8remediation
0.0relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.