10up

Simple Local Avatars

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2025-8482

  • EPSS 0.03%
  • Published 12.08.2025 06:42:41
  • Last modified 12.08.2025 14:25:33

The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of data in version 2.8.4. This is due to a missing capability check on the migrate_from_wp_user_avatar() function. This makes it possible for authenticated attac...

4.3

CVE-2024-10786

  • EPSS 0.09%
  • Published 16.11.2024 03:15:14
  • Last modified 18.11.2024 17:11:17

The Simple Local Avatars plugin for WordPress is vulnerable to unauthorized modification of datadue to a missing capability check on the sla_clear_user_cache function in all versions up to, and including, 2.7.11. This makes it possible for authentica...

8.8

CVE-2024-43116

  • EPSS 0.13%
  • Published 26.08.2024 21:15:24
  • Last modified 18.09.2024 16:22:14

Cross-Site Request Forgery (CSRF) vulnerability in 10up Simple Local Avatars.This issue affects Simple Local Avatars: from n/a through 2.7.10.