Title: User Profile Picture
Author: Cozmoslabs
Published: <strong>May 9, 2012</strong>
Last modified: July 9, 2026

---

Search plugins

![](https://ps.w.org/metronet-profile-picture/assets/banner-772x250.png?rev=2464420)

![](https://ps.w.org/metronet-profile-picture/assets/icon-256x256.png?rev=2464419)

# User Profile Picture

 By [Cozmoslabs](https://profiles.wordpress.org/cozmoslabs/)

[Download](https://downloads.wordpress.org/plugin/metronet-profile-picture.2.6.4.zip)

 * [Details](https://frp.wordpress.org/plugins/metronet-profile-picture/#description)
 * [Reviews](https://frp.wordpress.org/plugins/metronet-profile-picture/#reviews)
 *  [Installation](https://frp.wordpress.org/plugins/metronet-profile-picture/#installation)
 * [Development](https://frp.wordpress.org/plugins/metronet-profile-picture/#developers)

 [Support](https://wordpress.org/support/plugin/metronet-profile-picture/)

## Description

**User Profile Picture is no longer under active development, but will continue 
to work as is. We have integrated the current functionality in [Profile Builder](https://wordpress.org/plugins/profile-builder/)
where it will actively be maintained, and we recommend migrating to it.**

Set or remove a custom profile image for a user using the standard WordPress media
upload tool.

[View Documentation and Examples](https://www.cozmoslabs.com/user-profile-picture/)

Users must have the ability to upload images (typically author role or greater).
You can use the plugin [Profile Builder](https://wordpress.org/plugins/profile-builder/)
to allow other roles (e.g. subscribers) the ability to upload images.

A template tag is supplied for outputting to a theme and the option to override 
a user’s default avatar is also available.

### Documentation and Feedback

See the documentation on [GitHub](https://github.com/madalinungureanu/user-profile-picture).

> Please [Rate the Plugin](https://wordpress.org/support/plugin/metronet-profile-picture/reviews/#new-post).

## Screenshots

[⌊Profile page options.⌉⌊Profile page options.⌉[

Profile page options.

[⌊Media upload dialog.⌉⌊Media upload dialog.⌉[

Media upload dialog.

[⌊Gutenberg settings back-end⌉⌊Gutenberg settings back-end⌉[

Gutenberg settings back-end

[⌊Gutenberg profile front-end⌉⌊Gutenberg profile front-end⌉[

Gutenberg profile front-end

## Blocks

This plugin provides 2 blocks.

 *   User Profile Legacy
 *   User Profile

## Installation

 1. Upload `metronet-profile-picture` folder to the `/wp-content/plugins/` directory
 2. Activate the plugin through the ‘Plugins’ menu in WordPress
 3. Place `<?php mt_profile_img() ?>` in your templates (arguments and usage are below)

Arguments:

    ```
    /**
    * mt_profile_img
    *
    * Adds a profile image
    *
    @param $user_id INT - The user ID for the user to retrieve the image for
    @ param $args mixed
        size - string || array (see get_the_post_thumbnail)
        attr - string || array (see get_the_post_thumbnail)
        echo - bool (true or false) - whether to echo the image or return it
    */
    ```

Example Usage:

    ```
    <?php
    //Assuming $post is in scope
    if (function_exists ( 'mt_profile_img' ) ) {
        $author_id=$post->post_author;
        mt_profile_img( $author_id, array(
            'size' => 'thumbnail',
            'attr' => array( 'alt' => 'Alternative Text' ),
            'echo' => true )
        );
    }
    ?>
    ```

Since 2.2.0, you can add a profile author box using function `mt_author_box`.

    ```
    <?php
    mt_author_box( $post->post_author, array(
        'theme'              => 'tabbed',
        'profileAvatarShape' => 'round',
        'showWebsite'        => true,
        'website'            => 'https://www.ronalfy.com',
        'showSocialMedia'    => true,
        'socialMediaOptions' => 'brand',
        'socialWordPress'    => 'https://profiles.wordpress.org/ronalfy',
        'socialFacebook'     => 'https://facebook.com/mindefusement',
    ) );
    ```

View the code on [GitHub](https://github.com/madalinungureanu/user-profile-picture).

The REST API is currently supported for versions of WordPress 4.4 and up.

## FAQ

### How do you set a user profile image?

 1. Visit the profile page you would like to edit.
 2. Click on the profile picture to add, edit, or remove the profile picture.

### What role does a user have to be to set a profile image?

Author or greater.

### How do I create specific thumbnail sizes?

As of 1.5, three image sizes are created: profile_24, profile_48, and profile_96.
You are not limited to these sizes, however.

### Does the plugin work with Multisite?

Yes, but you’ll have to set a new profile image per site. This is currently a limitation
of the way the plugin stores its data. Ideas to overcome this are welcome.

## Reviews

![](https://secure.gravatar.com/avatar/0fae6afa09acd6f48d00244e145db868d12d52ab12e41e0caae9f607d5e9a2c2?
s=60&d=retro&r=g)

### 󠀁[Good plugin](https://wordpress.org/support/topic/good-plugin-6913/)󠁿

 [vignesh3894](https://profiles.wordpress.org/vignesh3894/) August 18, 2024

easy to use

![](https://secure.gravatar.com/avatar/363f659319bf5226d21a4d8553b40173e8ab5270a46a325c24790d56d1ce1b7b?
s=60&d=retro&r=g)

### 󠀁[Very nice](https://wordpress.org/support/topic/very-nice-1949/)󠁿

 [ethersav](https://profiles.wordpress.org/ethersav/) May 15, 2024

Very nice plugin! Thank you!

![](https://secure.gravatar.com/avatar/de46ac8aba3c1e3cf6e476d77765d6cdba0803016583b8575033d3297b66a9cf?
s=60&d=retro&r=g)

### 󠀁[Just amazing!!!](https://wordpress.org/support/topic/just-amazing-136/)󠁿

 [dallinchase](https://profiles.wordpress.org/dallinchase/) April 24, 2024

Solves a silly problem so well! It allows you to set a custom avatar in WP simply
and cleanly. I would give this 10 stars if I could!

![](https://secure.gravatar.com/avatar/ee1c5394cba7c112462378807263f5b72eb4b9ab6afe1669095d2969fed2c263?
s=60&d=retro&r=g)

### 󠀁[love this plugin](https://wordpress.org/support/topic/love-this-plugin-1156/)󠁿

 [EleanorR Greenawalt](https://profiles.wordpress.org/eleanorrgreenawalt/) September
10, 2022

I like this plugin so much! very user friendly

![](https://secure.gravatar.com/avatar/c4fba081ddf0d6b91f67555184483f8fe2f6ce863e3adc81e199df329bd93286?
s=60&d=retro&r=g)

### 󠀁[profile photo is a must](https://wordpress.org/support/topic/profile-photo-is-a-must/)󠁿

 [doncomputing](https://profiles.wordpress.org/doncomputing/) July 11, 2022

How do I make sure that the profile photo is must for the registration process?

![](https://secure.gravatar.com/avatar/27b06d6b9bee2d891db514e0546d6a41dbb204ccfbb6bd3fd31b7b7e89bd7695?
s=60&d=retro&r=g)

### 󠀁[Working perfectly](https://wordpress.org/support/topic/working-perfectly-104/)󠁿

 [djrandypanama](https://profiles.wordpress.org/djrandypanama/) January 15, 2022

The plugin works perfect

 [ Read all 59 reviews ](https://wordpress.org/support/plugin/metronet-profile-picture/reviews/)

## Contributors & Developers

“User Profile Picture” is open source software. The following people have contributed
to this plugin.

Contributors

 *   [ Cozmoslabs ](https://profiles.wordpress.org/cozmoslabs/)
 *   [ Ronald Huereca ](https://profiles.wordpress.org/ronalfy/)
 *   [ Alaa Alsalehi ](https://profiles.wordpress.org/alaadiaa/)

“User Profile Picture” has been translated into 14 locales. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/metronet-profile-picture/contributors)
for their contributions.

[Translate “User Profile Picture” into your language.](https://translate.wordpress.org/projects/wp-plugins/metronet-profile-picture)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/metronet-profile-picture/),
check out the [SVN repository](https://plugins.svn.wordpress.org/metronet-profile-picture/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/metronet-profile-picture/)
by [RSS](https://plugins.trac.wordpress.org/log/metronet-profile-picture/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 2.6.4

 * Released 2026-07-07
 * Security fix: hardened the AJAX and REST endpoints that set, retrieve, and remove
   profile pictures against Insecure Direct Object Reference (IDOR) access. Requests
   are now validated so a user can only act on their own profile picture (unless
   they have the capability to edit other users), and the referenced post must be
   the user’s own profile-picture post.
 * Security hardening: validated that the referenced media is a real attachment 
   before it is assigned, and required an authenticated capability check on the 
   profile-image REST route.
 * Security hardening: added a capability check and nonce verification to the “migrate
   to Profile Builder” admin-notice dismissal.
 * Tested up to WordPress 7.0.

#### 2.6.3

 * Released 2024-07-18
 * Migrated functionality to Profile Builder plugin where it will be actively maintained.
   You can keep the current plugin as is or migrate to Profile Builder to receive
   future updates.

#### 2.6.2

 * Released 2024-06-20
 * Security improvements

#### 2.6.1

 * Released 2023-09-28
 * Fixed php warning.

#### 2.6.0

 * Released 2021-06-25
 * Fixed a security flaw where a user can change others profile picture.

#### 2.5.0

 * Released 2021-02-18
 * Medium level (6.5) security fix. Please update as soon as possible.
 * Cleaned up REST user data so only pertitent information is returned to prevent
   user data leakage to roles with the upload_files capability.

#### 2.4.0

 * Released 2020-11-17
 * Fixing REST issues.
 * Cleaning up dist scripts.
 * General code cleanup.

#### 2.3.11

 * Released 2020-02-29
 * Added option to disable image sizes.

#### 2.3.10

 * Released 2019-12-29
 * Added new hook for add-on capability.

#### 2.3.9

 * Released 2019-12-06
 * Removing adverts for User Profile Picture Enhanced.

#### 2.3.8

 * Released 2019-10-30
 * Removing top-level navigation.

#### 2.3.7

 * Released 2019-10-23
 * Fixing options not being saved properly.

#### 2.3.6

 * Released 2019-10-09
 * Updating compatibility with WordPress 5.3
 * Fixing JavaScript error in WordPress 5.3

#### 2.3.5

 * Released 2019-09-17
 * Added option in Gutenberg block to customize the View Posts and View Website 
   text.

#### 2.3.2

 * Released 2019-07-14
 * Adding more filters for third-party plugin integration.

#### 2.3.0

 * Released 2019-07-06
 * Gutenberg blocks are now in the User Profile Picture category.
 * New filters for add-on extensibility
 * Added Options page so you can disable the Gutenberg blocks if you so desire.
 * Bug fix: Adding user display name to post title when User Profile Picture creates
   the user page.

#### 2.2.8

 * Released 2019-06-11
 * New REST API endpoint for changing profile pictures.

#### 2.2.7

 * Released 2019-06-11
 * Fixing permissions in REST API

#### 2.2.6

 * Released 2019-06-10
 * Fixing permissions in REST API

#### 2.2.5

 * Released 2019-06-02
 * Code cleanup.
 * Leaner Gutenberg JavaScript.
 * Gutenberg improvements.
 * Security improvements.

#### 2.2.0

 * Released 2019-05-12
 * Added template tags for displaying an author box

#### 2.1.3

 * Released 2019-02-16
 * Added filter to get users in Gutenberg besides author

#### 2.1.2

 * Released 2019-01-26
 * Resolving PHP notice for dirname

#### 2.1.1

 * Released 2018-12-20
 * Adding white posts theme to the tabbed view block
 * Fixing clearing for the tabbed view block

#### 2.1.0

 * Released 2018-12-19
 * Old block deprecated, but still supported
 * New block added with more control over appearance and includes themes.

#### 2.0.2

 * Released 2018-11-20
 * Gutenberg fixes with alignment (center, right) on the front end.
 * Gutenberg fixes with the toggle boxes defaulting back to nothing.

#### 2.0.1

 * Released 2018-11-20
 * Fixing PHP 5.2 incompatibility
 * Fixing Gutenberg block when there is no profile picture present on the front-
   end
 * Updating translations file

#### 2.0.0

 * Released 2018-11-19
 * Added Gutenberg block for easy outputting to posts
 * Tested with WordPress 5.0

#### 1.5.5

 * Released 2018-08-19
 * Enhancement: Loading image now shows between states for better UX
 * Enhancement: Plugin attempts to override the default WordPress avatar in the 
   User Profile page
 * Enhancement: Plugin attempts to override the admin bar avatars if the users match
 * Enhancement: Added Click to Edit bar to make it more obvious what to do with 
   the profile picture
 * Refactor: Plugin now uses wp_send_json instead of json_encode for more compatibility

#### 1.5.1

 * Released 2018-07-12
 * Fixed a condition where a featured image was shown for the author instead of 
   a blank gravatar

#### 1.5.0

 * Released 2018-07-11
 * Support for AMP avatar has been added
 * Two REST API endpoints have been added to facilitate better programatic avatar
   selection

#### 1.4.3

 * Released 2016-09-24
 * Bug fix: Post featured image is being shown as user’s profile picture when no
   avatar is selected.

#### 1.4.1

 * Released 2016-08-30 (Props @Monter)
 * Fix select states in image modal

#### 1.4.0

 * Released 2016-08-29 (props kelderic)
 * Bug fix: CSS Fixes to the trashcan icon and image placeholders
 * Bug fix: Modal window was set to the wrong settings
 * Enhancement: Avatar override is now the default option

#### 1.3.1

 * Released 2016-04-02
 * Fixing thumbnail calls that could potential be inadvertently filtered and cause
   the profile picture to provide an erroneous callback. Props @Monter.

#### 1.3.0

 * Released 2016-03-28
 * Adding REST API endpoint

#### 1.2.7

 * Updated 2015-08-20 for WP 4.3 compatibility
 * Released 2015-06-10
 * Bug fix: warning message saying missing argument for avatar_override

#### 1.2.5

 * Released 2015-06-06
 * Bug fix: get_avatar override now accepts custom classes.
 * Added `mpp_avatar_classes` filter to get_avatar override to allow global class
   overrides/additions.

#### 1.2.3

 * Released 2015-05-20
 * Revised post type initialization to make sure post type is completely hidden.
 * Refactored function mt_profile_img to use a different API call so that output
   isn’t inadvertently filtered.
 * Added new filter, mpp_thumbnail_html, to filter output.

#### 1.2.2

 * Released 2015-04-16
 * Added compatibility to Advanced Custom Fields.
 * Added increased capabilities check to Ajax calls.
 * Ensuring WordPress 4.2 compatibility.

#### 1.2.1

 * Released 2015-03-03
 * Fixed internationalization errors.
 * Added Spanish translation.

#### 1.2.0

 * Released 2014-12-07
 * Reducing clutter in the interface. Removed text option to upload. Added default
   image if no profile image is available. Added option to remove the profile image.
 * Fixed internationalization bug in the JavaScript.

#### 1.1.0

 * Released 2014-11-11
 * Added the ability to remove profile images (aside from deleting the image).
 * Added better internationalization capabilities.
 * Added compatibility with [Theme My Login](https://wordpress.org/plugins/theme-my-login/).

#### 1.0.23

 * Released 2014-10-20
 * Added a new filter to allow the “Override Avatar” interface to be hidden (and
   turned on my default).

#### 1.0.22

 * Released 2014-09-02
 * Added minor update to additional user meta for easier querying (props Solinx)

#### 1.0.21

 * Released 2013-09-09
 * Fixed avatar override on options discussion page.

#### 1.0.20

 * Released 2013-05-13
 * Added a filter for turning on “Override Avatar” by default.

#### 1.0.19

 * Added support for 2.0.x version of [Post Thumbnail Editor](https://wordpress.org/extend/plugins/post-thumbnail-editor/)

#### 1.0.18

 * Added basic multisite support

#### 1.0.16

 * Fixed a bug where only the profile image interface was showing for only authors
   and not editors and administrators.

#### 1.0.15

 * Built-in support for [Post Thumbnail Editor](https://wordpress.org/extend/plugins/post-thumbnail-editor/)
 * Better integration with the new WP 3.5 media uploader
 * Various bug fixes.

#### 1.0.10

 * Usability enhancements.
 * Stripping out useless code.
 * Updating documentation

#### 1.0.9

 * Adding support for the new 3.5 media uploader.

#### 1.0.3

 * Bug fix: Avatar classes in the comment section

#### 1.0.2

 * Bug fix: Error being shown in comment section

#### 1.0.1

 * Bug fix: Not able to “uncheck” Override Avatar.
 * Bug fix: Deleting profile image and not reverting to normal avatar.

#### 1.0.0

 * Initial release.

## Meta

 *  Version **2.6.4**
 *  Last updated **3 months ago**
 *  Active installations **40,000+**
 *  WordPress version ** 5.0 or higher **
 *  Tested up to **7.0.7**
 *  PHP version ** 5.6 or higher **
 *  Languages
 * [Albanian](https://sq.wordpress.org/plugins/metronet-profile-picture/), [Czech](https://cs.wordpress.org/plugins/metronet-profile-picture/),
   [Dutch](https://nl.wordpress.org/plugins/metronet-profile-picture/), [English (Canada)](https://en-ca.wordpress.org/plugins/metronet-profile-picture/),
   [English (US)](https://wordpress.org/plugins/metronet-profile-picture/), [French (France)](https://fr.wordpress.org/plugins/metronet-profile-picture/),
   [German](https://de.wordpress.org/plugins/metronet-profile-picture/), [Italian](https://it.wordpress.org/plugins/metronet-profile-picture/),
   [Japanese](https://ja.wordpress.org/plugins/metronet-profile-picture/), [Persian](https://fa.wordpress.org/plugins/metronet-profile-picture/),
   [Russian](https://ru.wordpress.org/plugins/metronet-profile-picture/), [Spanish (Chile)](https://cl.wordpress.org/plugins/metronet-profile-picture/),
   [Spanish (Spain)](https://es.wordpress.org/plugins/metronet-profile-picture/),
   [Spanish (Venezuela)](https://ve.wordpress.org/plugins/metronet-profile-picture/),
   and [Swedish](https://sv.wordpress.org/plugins/metronet-profile-picture/).
 *  [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/metronet-profile-picture)
 * Tags
 * [avatar](https://frp.wordpress.org/plugins/tags/avatar/)[blocks](https://frp.wordpress.org/plugins/tags/blocks/)
   [gravatar](https://frp.wordpress.org/plugins/tags/gravatar/)[user profile](https://frp.wordpress.org/plugins/tags/user-profile/)
   [users](https://frp.wordpress.org/plugins/tags/users/)
 *  [Advanced View](https://frp.wordpress.org/plugins/metronet-profile-picture/advanced/)

## Ratings

 4.6 out of 5 stars.

 *  [  52 5-star reviews     ](https://wordpress.org/support/plugin/metronet-profile-picture/reviews/?filter=5)
 *  [  0 4-star reviews     ](https://wordpress.org/support/plugin/metronet-profile-picture/reviews/?filter=4)
 *  [  3 3-star reviews     ](https://wordpress.org/support/plugin/metronet-profile-picture/reviews/?filter=3)
 *  [  1 2-star review     ](https://wordpress.org/support/plugin/metronet-profile-picture/reviews/?filter=2)
 *  [  3 1-star reviews     ](https://wordpress.org/support/plugin/metronet-profile-picture/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/metronet-profile-picture/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/metronet-profile-picture/reviews/)

## Contributors

 *   [ Cozmoslabs ](https://profiles.wordpress.org/cozmoslabs/)
 *   [ Ronald Huereca ](https://profiles.wordpress.org/ronalfy/)
 *   [ Alaa Alsalehi ](https://profiles.wordpress.org/alaadiaa/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/metronet-profile-picture/)

## Donate

Would you like to support the advancement of this plugin?

 [ Donate to this plugin ](https://cozmoslabs.com/)