The 17-year-old security researcher Indrajeet Bhuyan discovered two security flaws in the WhatsApp Web client. The first bug, dubbed WhatsApp photo privacy bug, allows anyone to view a users profile image even if the attacker in not in the contact list of the targeted user. The second bug affects WhatsApp Web Photo Sync functionality, the security expert noticed that whenever a user deletes an image that received by a user using the mobile version of WhatsApp, the picture appears blurred and cannot be viewed.”]
Source: https://securityaffairs.co/wordpress/32863/hacking/whatsapp-web-client-privacy-issues.html