Simple Local Avatars

simple-local-avatars · plugin

Known security vulnerabilities for Simple Local Avatars. Find out in seconds which version runs on your site with WP Lens.

3 known vulnerabilities

latest Aug 12, 2025

Vulnerabilities

CVE-2024-43116
WordPress Simple Local Avatars plugin <= 2.7.10 - Cross Site Request Forgery (CSRF) vulnerability
High 8.8
CVE-2025-8482
Simple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration
Medium 4.3
CVE-2024-10786
Simple Local Avatars <= 2.7.11 - Missing Authorization to Authenticated (Subscriber+) User Cache Clearing
Medium 4.3