All products

simple-local-avatars

WordPress · Plugin
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
http-cache-semantics vulnerable to Regular Expression Denial of ServiceCVE-2022-25881 · GHSA-RC47-6667-2J5J org.webjars.npm:http-cache-semanticshttp-cache-semantics MavennpmRed HatWordPress High Fix reported
Simple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar MigrationCVE-2025-8482 simple-local-avatars WordPress Medium Fix reported
Remote code execution in simple-gitCVE-2022-25860 · GHSA-9W5J-4MWV-2WJ8 simple-gitads-txt npmWordPress Critical Fix reported
Terser insecure use of regular expressions leads to ReDoSCVE-2022-25858 · GHSA-4WF5-VPHF-C2XC terserMigration Toolkit for Containers/rhmtc/openshift-migration-ui-rhel8 npmRed HatWordPress High Fix reported
Simple Local Avatars <= 2.7.11 - Missing Authorization to Authenticated (Subscriber+) User Cache ClearingCVE-2024-10786 simple-local-avatars WordPress Medium Fix reported
Simple Local Avatars <= 2.7.10 - Cross-Site Request Forgery via save_default_avatar_file_id()CVE-2024-43116 simple-local-avatars WordPress Medium Fix reported