Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
10up

10up Simple Local Avatars vulnerabilities

3 published CVEs name 10up Simple Local Avatars among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
0
Critical
0
Known exploited
0

Critical 0High 0Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20242
  2. 20251

Newest CVEs

  • CVE-2025-8482

    Simple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration

    10up · Simple Local Avatars

    Medium4.3
  • CVE-2024-10786

    Simple Local Avatars <= 2.7.11 - Missing Authorization to Authenticated (Subscriber+) User Cache Clearing

    10up · Simple Local Avatars

    Medium4.3
  • CVE-2024-43116

    WordPress Simple Local Avatars plugin <= 2.7.10 - Cross Site Request Forgery (CSRF) vulnerability

    10up · Simple Local Avatars

    Medium4.3

Most common weaknesses

  1. CWE-862 Missing authorization2
  2. CWE-352 Cross-site request forgery (CSRF)1