Simple Local Avatars

Vulnerabilities 5Slug simple-local-avatarsLatest version 2.8.6WordPress.org →

Minimum safe version

2.8.5

Update to 2.8.5 or later to address 5 fixable vulnerabilities

Latest available2.8.6 ✓
Medium 4.3
2025-08-12< 2.8.5

WordPress Simple Local Avatars Plugin <= 2.8.4 is vulnerable to Broken Access Control

EUVDPatchstackWordfenceCVE
High 7.5
2023-02-23< 2.7.4

http-cache-semantics < 4.1.1 - Regular Expression Denial of Service (ReDoS)

WordfenceCVE
Critical 9.8
2023-02-23< 2.7.4

simple-git < 3.16.0 - Remote Code Execution

WordfenceCVE