CVE-2025-8482 | Simple Local Avatars Plugin up to 2.8.4 on WordPress migrate_from_wp_user_avatar authorization

A vulnerability was found in Simple Local Avatars Plugin up to 2.8.4 on WordPress. It has been classified as problematic. This affects the function migrate_from_wp_user_avatar. The manipulation leads to missing authorization.

This vulnerability is uniquely identified as CVE-2025-8482. It is possible to initiate the attack remotely. There is no exploit available.