CSRF Vulnerability Affects Simple Local Avatars

CVE-2024-43116

What is CVE-2024-43116?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the 10up Simple Local Avatars plugin, which impacts users of this WordPress plugin. This vulnerability allows attackers to perform unauthorized actions on behalf of authenticated users without their consent. Affected versions include those from n/a through 2.7.10, posing significant security risks for websites utilizing this plugin. It is essential for site administrators to apply updates and patches promptly to mitigate the potential exploitation of this vulnerability.

References