PLUGIN SECURITY
Is Metronet Profile Picture safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Metronet Profile Picture WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
metronet-profile-picture - Requires PHP: 5.6+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
- CVE-2021-24473 — User Profile Picture [metronet-profile-picture] < 2.6.0 (CWE-639) · Medium
- CVE-2021-24170 — User Profile Picture [metronet-profile-picture] < 2.5.0 (CWE-200) · High
- User Profile Picture [metronet-profile-picture] < 2.5.0
- CVE-2024-5639 — User Profile Picture [metronet-profile-picture] < 2.6.2 (CWE-639) · Medium
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- Simple Local Avatars — 100000+ active installs — max PHP 8.4
- Gravatar Enhanced – Avatars, Profiles, and Privacy — 100000+ active installs — max PHP 8.4
- One User Avatar | User Profile Picture — 100000+ active installs — max PHP 8.4
- Basic User Avatars — 20000+ active installs
- WP User Avatars — 20000+ active installs
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.