CVE-2022-1349

CVE-2022-1349 is a medium-severity vulnerability affecting the WPQA Builder Plugin for WordPress, specifically versions prior to 5.2. This flaw allows authenticated users, even those with subscriber-level privileges, to delete the profile pictures of any other user due to improper validation of the image_id parameter. The attack vector is network-based with low complexity, requiring no user interaction, and primarily impacts integrity by allowing unauthorized modification of user profiles. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.