Simple Local Avatars Plugin

Adds an avatar upload field to user profiles if the current user has media permissions. Generates requested sizes on demand just like Gravatar! Simple and lightweight.

Just edit a user profile, and scroll down to the new “Avatar” field. The plug-in will take care of cropping and sizing!

1. Stores avatars in the “uploads” folder where all of your other media is kept.
2. Has a simple, native interface.
3. Fully supports Gravatar and default avatars if no local avatar is set for the user – but also allows you turn off Gravatar.
4. Generates the requested avatar size on demand (and stores the new size for efficiency), so it looks great, just like Gravatar!
5. Lets you decide whether lower privilege users (subscribers, contributors) can upload their own avatar.
6. Enables rating of local avatars, just like Gravatar.

1. Install easily with the WordPress plugin control panel or manually download the plugin and upload the extracted folder to the /wp-content/plugins/ directory
2. Activate the plugin through the ‘Plugins’ menu in WordPress
3. If you only want users with file upload capabilities to upload avatars, check the applicable option under Settings > Discussion
4. Start uploading avatars by editing user profiles!

Use avatars in your theme using WordPress’ built in get_avatar() function: https://codex.wordpress.org/Function_Reference/get_avatar

You can also use get_simple_local_avatar() (with the same arguments) to retrieve local avatars a bit faster, but this will make your theme dependent on this plug-in.

1. 

   Avatar upload field on a user profile page

2.7.11 – 2024-07-18

Note that this release bumps the minimum required version of WordPress from 6.3 to 6.4.

• Changed: Bumped WordPress “tested up to” version 6.6 and minimum version to 6.4 (props @sudip-md, @ankitguptaindia, @jeffpaul via #289, #290).
• Security: Add nonce check when saving the default avatar ID (props @faisal-alvi, @aaemnnosttv, @rafiem, @dkotter via GHSA-46pw-6m35-9m7x).
• Security: Bump braces from 3.0.2 to 3.0.3, pac-resolver from 7.0.0 to 7.0.1, socks from 2.7.1 to 2.8.3 and removes ip (props @dependabot, @Sidsector9 via #286).
• Security: Bump ws from 7.5.9 to 7.5.10 (props @dependabot, @faisal-alvi via #287).

2.7.10 – 2024-05-24

• Fixed: Fix Default Avatar Fallback (props @amirhossein7, @faisal-alvi, @dkotter, @qasumitbagthariya via #281).
• Security: Bump express from 4.18.2 to 4.19.2 (props @dependabot, @faisal-alvi via #269).
• Security: Bump follow-redirects from 1.15.5 to 1.15.6 (props @dependabot, @faisal-alvi via #269).
• Security: Bump ip from 1.1.8 to 1.1.9 (props @dependabot, @faisal-alvi via #269).
• Security: Bump webpack-dev-middleware from 5.3.3 to 5.3.4 (props @dependabot, @faisal-alvi via #269).

2.7.9 – 2024-05-14

• Fixed: Ensure default Gravatar avatars are shown correctly (props @faisal-alvi, @dkotter, @horrormoviesgr, @inpeaks, @lillylark, @rafaucau, @janrenn via #278).

2.7.8 – 2024-05-08

Note that this release bumps the minimum required version of WordPress from 5.7 to 6.3.

• Added: “Testing” section in the CONTRIBUTING.md file (props @kmgalanakis, @jeffpaul via #274).
• Changed: Bumped WordPress “tested up to” version 6.5 (props @sudip-md, @dkotter, @jeffpaul via #270).
• Changed: Move simple_local_avatar_deleted action to avatar_delete (props @lllopo, @faisal-alvi, @dkotter via #255).
• Changed: Clean up NPM dependencies and update node to v20 (props @Sidsector9, @dkotter via #257).
• Changed: Update CODEOWNERS of the plugin (props @jeffpaul, @dkotter via #253).
• Changed: Disabled auto sync pull requests with target branch (props @iamdharmesh, @jeffpaul via #263).
• Changed: Upgrade download-artifact from v3 to v4 (props @iamdharmesh, @jeffpaul via #265).
• Changed: Replaced lee-dohm/no-response with actions/stale to help with closing no-response/stale issues (props @jeffpaul, @dkotter via #266).
• Fixed: Broken default avatar when Local Avatars Only is unchecked (props @faisal-alvi, @ankitguptaindia, @qasumitbagthariya via #260).
• Fixed: Ensure high-quality avatar preview on profile edit screen (props @ocean90, @dkotter via #273).
• Fixed: Possible PHP warning (props @BhargavBhandari90, @dkotter via #261).
• Fixed: Fixed typos (props @szepeviktor, @dkotter via #268).

2.7.7 – 2023-12-13

• Fixed: Revert the Host/Domain support for local avatar URL (props @faisal-alvi, @jakejackson1, @leogermani, @dkotter via #247).
• Security: Bump axios from 0.25.0 to 1.6.2 and @wordpress/scripts from 23.7.2 to 26.18.0 (props @dependabot, @faisal-alvi via #250).

2.7.6 – 2023-11-30

• Added: Check for minimum required PHP version before loading the plugin (props @kmgalanakis, @faisal-alvi via #226).
• Added:pre_simple_local_avatar_url filter to allow an avatar image to be short-circuited before Simple Local Avatars processes it (props @johnbillion, @peterwilsoncc via #237).
• Added: Repo Automator GitHub Action (props @iamdharmesh, @faisal-alvi via #228).
• Added: E2E test for checking the front end of avatars (props @Firestorm980, @iamdharmesh via #219).
• Changed: Bumped WordPress “tested up to” version 6.4 (props @zamanq, @ankitguptaindia, @faisal-alvi, @qasumitbagthariya via #230, #244).
• Changed: Update the Dependency Review GitHub Action to leverage our org-wide config file to check for GPL-compatible licenses (props @jeffpaul, @faisal-alvi via #215).
• Changed: Documentation updates (props @jeffpaul, @faisal-alvi via #242).
• Fixed: Address conflicts with other plugins and loading the media API (props @EHLOVader, @dkotter via #218).
• Fixed: Prevent PHP fatal error when switching from a multisite to single site installation (props @ocean90, @ravinderk, @faisal-alvi via #222).
• Fixed: Local avatar urls remain old after domain/host change (props @jayedul, @ravinderk, @jeffpaul, @faisal-alvi via #216).
• Security: Bump word-wrap from 1.2.3 to 1.2.4 (props @dependabot, @faisal-alvi via #223).
• Security: Bump tough-cookie from 4.1.2 to 4.1.3 (props @dependabot, @faisal-alvi via #225).
• Security: Bump @cypress/request from 2.88.10 to 3.0.0 (props @dependabot, @faisal-alvi via #225, #234).
• Security: Bump cypress from 11.2.0 to 13.2.0 (props @dependabot, @faisal-alvi, @iamdharmesh via #234, #236).
• Security: Bump postcss from 8.4.21 to 8.4.31 (props @dependabot, @faisal-alvi via #238).
• Security: Bump @babel/traverse from 7.20.12 to 7.23.2 (props @dependabot, @faisal-alvi via #240).
• Security: Bump @10up/cypress-wp-utils version to 0.2.0 (props @iamdharmesh, @faisal-alvi via #236).
• Security: Bump @wordpress/env version from 5.2.0 to 8.7.0 (props @iamdharmesh, @faisal-alvi via #236).
• Security: Bump cypress-mochawesome-reporter version from 3.0.1 to 3.6.0 (props @iamdharmesh, @faisal-alvi via #236).

2.7.5 – 2023-05-15

• Added: Ajax loading animation during process of uploading and deleting local avatars (props @lllopo, @BhargavBhandari90, @faisal-alvi via #204).
• Changed: Avatar removal button text (props @jayedul, @jeffpaul, @dkotter, @faisal-alvi via #208).
• Changed: WordPress “tested up to” version 6.2 (props @jayedul, @faisal-alvi via #210).
• Changed: Run E2E tests on the zip generated by “Build release zip” action (props @jayedul, @iamdharmesh, @faisal-alvi via #205).
• Security: Bump webpack from 5.75.0 to 5.76.1 (props @dependabot, @faisal-alvi via #207).

2.7.4 – 2023-02-23

• Fixed: Support passing WP_User to get_avatar() (props @mattheu, @faisal-alvi via #193).
• Fixed: Remove trailing commas in function calls (props @patrixer, @dkotter, @sekra24, @faisal-alvi via #196).
• Security: Bump simple-git from 3.15.1 to 3.16.0 (props @dependabot, @faisal-alvi via #191).
• Security: Bump http-cache-semantics from 4.1.0 to 4.1.1 (props @dependabot, @faisal-alvi via #197).

2.7.3 – 2023-01-16

• Fixed: Issue causing fatal errors when avatars used on front end of site (props @Rottinator, @peterwilsoncc, @ravinderk, @faisal-alvi via #187).
• Fixed: Deprecation error in admin on PHP 8.0 and later (props @Rottinator, @peterwilsoncc, @ravinderk, @faisal-alvi via #187).

2.7.2 – 2023-01-13

• Added: Filter hook simple_local_avatars_upload_limit to restrict image upload size & image file checking enhanced (props @Shirkit, @jayedul, @faisal-alvi, @jeffpaul via #171).
• Added: GitHub Actions summary on Cypress e2e test runs (props @faisal-alvi, @jeffpaul, @iamdharmesh via #174).
• Changed: Cypress integration migrated from 9.5.4 to 11.2.0 (props @iamdharmesh, @jayedul, @faisal-alvi via #172).
• Fixed: PHP8 support for assign_new_user_avatar (props @lllopo, @mattwatsoncodes, @faisal-alvi via #183).
• Fixed: Fixed the user profile language not respected issue (props @dkotter, @lllopo, @faisal-alvi, @jeffpaul via #175).
• Removed: textdomain from the core strings and the function update_avatar_ratings as it’s not required anymore (props @dkotter, @lllopo, @faisal-alvi, @jeffpaul via #175).
• Security: Bump json5 from 1.0.1 to 1.0.2 (props @dependabot, @faisal-alvi via #182).

2.7.1 – 2022-12-08

• Added: Added missing files from the last release and changed the readme file to fix the bullet points and added fullstops.

2.7.0 – 2022-12-08

• Added: Added Build release zip GitHub Action (props @peterwilsoncc, @faisal-alvi via #168).
• Changed: Set plugin defaults on wp_initialize_site instead of deprecated action wpmu_new_blog (props @kadamwhite, @faisal-alvi via #156).
• Changed: Support Level from Active to Stable (props @jeffpaul, @dkotter via #159).
• Changed: Build tools: Allow PHPCS installer plugin to run without prompting user (props @peterwilsoncc, @jeffpaul via #164).
• Changed: WP tested up to version bump to 6.1 (props @peterwilsoncc, @faisal-alvi via #165).
• Fixed: Non admin users can not crop avatar (props @jayedul, @faisal-alvi, @zamanq, @dkotter, @jeffpaul via #155).
• Security: Bump @wordpress/env from 4.9.0 to 5.2.0 and got from 10.7.0 to 11.8.5 (props @dependabot, @faisal-alvi via #153).
• Security: Bump loader-utils from 2.0.2 to 2.0.3 (props @dependabot, @faisal-alvi via #160).
• Security: Bump loader-utils from 2.0.3 to 2.0.4 (props @dependabot, @peterwilsoncc via #162).
• Security: Bump simple-git from 3.9.0 to 3.15.1 (props @dependabot via #176).

View historical changelog details here.