SL
Product
Simple Local Avatars
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Simple Local Avatars to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-43116 | 8.8 | Aug 26 | WordPress Simple Local Avatars plugin <= 2.7.10 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 2.7.10 |
| CVE-2025-8482 | 4.3 | Aug 12 | Simple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration Affected: through 2.8.4 |
| CVE-2024-10786 | 4.3 | Nov 16 | Simple Local Avatars <= 2.7.11 - Missing Authorization to Authenticated (Subscriber+) User Cache Clearing Affected: through 2.7.11 |
Showing 3