10up Simple Local Avatars

• CVE-2025-8482 Medium 4.3 Simple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration 0.3%
• CVE-2024-10786 Medium 4.3 Simple Local Avatars <= 2.7.11 - Missing Authorization to Authenticated (Subscriber+) User Cache Clearing 0.3%
• CVE-2024-43116 Medium 4.3 WordPress Simple Local Avatars plugin <= 2.7.10 - Cross Site Request Forgery (CSRF) vulnerability 0.2%