Simple Local Avatars

WordPress plugin · simple-local-avatars · WordPress.org ↗

Latest v2.8.6 Last release Aug 20, 2026 Tested up to WP 7.1.1 100,000+ active installs

Critical

High

Known total

Unfixed

Running Simple Local Avatars on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
CRITICAL CVSS 9.8	Simple Local Avatars [simple-local-avatars] < 2.7.4 WPVulnerability · PoC available	< 2.7.4	v2.7.4	CVE-2022-25860	Jan 24, 2023
HIGH CVSS 8.8	Simple Local Avatars [simple-local-avatars] < 2.7.11 WPVulnerability	< 2.7.11	v2.7.11	CVE-2024-43116	Aug 7, 2024
HIGH CVSS 7.5	Simple Local Avatars [simple-local-avatars] < 2.7.4 WPVulnerability · PoC available	< 2.7.4	v2.7.4	CVE-2022-25881	Jan 31, 2023
MEDIUM CVSS 4.3	Simple Local Avatars [simple-local-avatars] < 2.8.5 WPVulnerability	< 2.8.5	v2.8.5	CVE-2025-8482	Aug 11, 2025
MEDIUM CVSS 4.3	Simple Local Avatars [simple-local-avatars] < 2.8.0 WPVulnerability	< 2.8.0	v2.8.0	CVE-2024-10786	Nov 15, 2024

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.