What’s Vulnerable › Products

10up Simple Local Avatars vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your 10up Simple Local Avatars version is affected

Latest 10up Simple Local Avatars vulnerabilities

• CVE-2025-8482 — Simple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration (CVSS 4.3)
• CVE-2024-10786 — Simple Local Avatars <= 2.7.11 - Missing Authorization to Authenticated (Subscriber+) User Cache Clearing (CVSS 4.3)
• CVE-2024-43116 — WordPress Simple Local Avatars plugin <= 2.7.10 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)