Simple Local Avatars
Healthy: Simple Local Avatars is maintained, has no open risk signals and no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 90 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| helen | 24 Oct 2018 to 7 May 2019, 4 commits |
|---|---|
| 10upbot | 7 May 2019 to 30 Jul 2021, 7 commits |
| 10up | 25 Apr 2022 to 19 Aug 2026, 33 commits |
3 committers recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 3 months ago
- Releases, 24 months
- 7
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 3 |
| Q3 2024 | 1 |
| Q4 2024 | 4 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 2 |
| Q4 2025 | 0 |
| Q1 2026 | 1 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 19 Aug 2026. Tested with WordPress 7.1 (current).
Support
0% of 1 support threads resolved in the last 2 months.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 11 Aug 2025 | Simple Local Avatars <= 2.8.4 - Missing Authorization to Authenticated (Subscriber+) Avatar Migration | 4.3 | <= 2.8.4 | 2.8.5 | 0 |
| 15 Nov 2024 | Simple Local Avatars <= 2.7.11 - Missing Authorization to Authenticated (Subscriber+) User Cache Clearing | 4.3 | <= 2.7.11 | 2.8.0 | 0 |
| 7 Aug 2024 | Simple Local Avatars <= 2.7.10 - Cross-Site Request Forgery via save_default_avatar_file_id() | 4.3 | <= 2.7.10 | 2.7.11 | 0 |
| 23 Feb 2023 | simple-git < 3.16.0 - Remote Code Execution | 8.1 | <= 2.7.3 | 2.7.4 | 0 |
| 23 Feb 2023 | http-cache-semantics < 4.1.1 - Regular Expression Denial of Service (ReDoS) | 5.3 | <= 2.7.3 | 2.7.4 | 0 |
| 14 Jul 2022 | terser (JS Package) < 5.14.2 - Denial of Service | 3.7 | <= 2.5.0 | 2.6.0 | 61 |
Source: Wordfence Intelligence.
Reputation
| Q4 2023 | 3.0 |
|---|---|
| Q2 2024 | 3.0 |
| Q3 2024 | 4.2 |
| Q4 2024 | 5.0 |
| Q1 2025 | 5.0 |
Average rating rose from 3.0 to 5.0 between Q4 2023 and Q1 2025.
| 5 star | 71 |
|---|---|
| 4 star | 8 |
| 3 star | 4 |
| 2 star | 1 |
| 1 star | 5 |
- Simply Doesn’t Work · 1 star · 1 Jul 2024
- Was good but no longer works · 1 star · 12 May 2024
- doesnt work · 1 star · 12 Nov 2023
Momentum
100,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 3,033 |
|---|---|
| 11 May 2026 | 5,734 |
| 18 May 2026 | 6,583 |
| 25 May 2026 | 5,719 |
| 1 Jun 2026 | 6,336 |
| 8 Jun 2026 | 5,882 |
| 15 Jun 2026 | 4,933 |
| 22 Jun 2026 | 4,672 |
| 29 Jun 2026 | 4,569 |
| 6 Jul 2026 | 4,305 |
| 13 Jul 2026 | 5,479 |
| 20 Jul 2026 | 5,343 |
| 27 Jul 2026 | 4,757 |
| 3 Aug 2026 | 4,613 |
| 10 Aug 2026 | 4,025 |
| 17 Aug 2026 | 3,848 |
| 24 Aug 2026 | 4,217 |
| 31 Aug 2026 | 4,194 |
| 7 Sep 2026 | 3,944 |
| 14 Sep 2026 | 4,265 |
| 21 Sep 2026 | 4,885 |
| 28 Sep 2026 | 4,366 |
| 5 Oct 2026 | 5,374 |
| 12 Oct 2026 | 5,220 |
| 19 Oct 2026 | 6,278 |
| 26 Oct 2026 | 5,844 |
| 2 Nov 2026 | 880 |
Weekly downloads over the last 4 weeks are 5% below the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 2.8.6 |
|---|---|
| Author | 10up |
| Added | 17 Jan 2011 |
| Last updated | 19 Aug 2026 |
| Active installs | 100,000+ |
| Requires WordPress | 6.6 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | User Management & Authentication > User Registration & Login |
| Tags | users, avatar, profile, gravatar, user photos |
Other plugins by this author: Safe SVG, Simple Page Ordering, Ads.txt Manager, Safe Redirect Manager, Restricted Site Access, ElasticPress, Autopost for X (formerly Autoshare for Twitter), Insert Special Characters, Microsoft Azure Storage for WordPress, Convert to Blocks, Block for Apple Maps, ElasticPress Debugging Add-On
Questions
Is Simple Local Avatars still maintained?
Simple Local Avatars was last updated on 19 Aug 2026. Its Canary status is Healthy.
Is Simple Local Avatars safe?
Simple Local Avatars has no open unpatched vulnerabilities on record. 2 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.
Who owns Simple Local Avatars?
The wordpress.org author is 10up. Recent committers: 10up, 10upbot, helen, jakemgold, plugin-master. We have recorded no ownership change.
What can I use instead of Simple Local Avatars?
Plugins in the same category with a higher Canary Score: LoginWP (Formerly Peter's Login Redirect), Gravatar Enhanced - Avatars, Profiles, and Privacy, WP User Avatars, Sidebar Login, WP Login Form.