CVE-2024-5639 | User Profile Picture Plugin up to 2.6.1 on WordPress resource injection

A vulnerability classified as problematic has been found in User Profile Picture Plugin up to 2.6.1 on WordPress. Affected is an unknown function of the component Profile Picture Handler. The manipulation leads to improper control of resource identifiers.

This vulnerability is traded as CVE-2024-5639. It is possible to launch the attack remotely. There is no exploit available.