Unauthorized, conflicting update

Very unethical behavior from this plugin author. I was contacted by a client who suddenly found themselves unable to log into their own website after a routine plugins update. I determined that on May 20, WP User Avatar updated itself into ProfilePress, which was basically a completely different plugin trying to be a user management solution.

Because of some poorly designed login redirection (again, installed without my client’s knowledge or permission as part of the update), my client ended up in an infinite redirection loop when they tried to log in. Disabling the plugin immediately fixed the issue.

I would definitely not install this plugin or anything designed by the plugin team.