Plugin icon

Simple Local Avatars

simple-local-avatars

Vulnerabilities:

3

Last Updated:

February 17, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2025-08-11
Title
Simple Local Avatars < 2.8.5 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration
Fixed in
Fixed in 2.8.5
CVSS
4.3 (medium)
Published
2024-11-15
Title
Simple Local Avatars < 2.8.0 - Missing Authorization to Authenticated (Subscriber+) User Cache Clearing
Fixed in
Fixed in 2.8.0
CVSS
4.3 (medium)
Published
2024-08-07
Title
Simple Local Avatars < 2.7.11 - Cross-Site Request Forgery via save_default_avatar_file_id()
Fixed in
Fixed in 2.7.11
CVSS
4.3 (medium)