Advanced User Avatar | Custom Profile Picture Uploader for WordPress, WooCommerce, and BuddyPress

Changelog

1.3.0 – 29-08-2026

• Feature – WP-Members integration: adds the avatar uploader to the WP-Members profile edit form.
• Enhance – Templates can be overridden from the theme. Each one now resolves through yourtheme/wpmake-advance-user-avatar/, then yourtheme/, then the shipped copy, so customised markup survives an update. The theme sub-directory and the resolved path are both filterable.
• Enhance – Six new action hooks around the markup — before and after the avatar, before and after the uploader, and before and after the uploader’s buttons — for changes that do not need a whole template override.
• Enhance – Both shortcodes now accept attributes. size, radius and class on either, plus upload_text, remove_text and capture_text on the uploader, so a single placement can differ from the site-wide styling. The attributes were previously parsed and discarded.
• Enhance – Frontend styles are driven by CSS custom properties on the widget container, so one low-specificity rule in Additional CSS is enough to restyle the avatar size and shape and the button colour, padding, font size and radius — no !important needed.
• Fix – The get_avatar filter called remove_all_filters( 'get_avatar' ) and re-added only itself, discarding every other callback on the hook for the rest of the request — other plugins’ filters, and the site owner’s own snippets, silently stopped working. Replaced with a re-entrancy guard that gives the same protection without touching anyone else’s filters.
• Fix – Removed !important from .avatar-50, .avatar-100 and .avatar-150. get_avatar() already emits matching width and height attributes, so it only served to stop the theme, and the site owner, from resizing those avatars.
• Fix – Review notice buttons not behaving correctly.
• Fix – Security: the accepted file types and the maximum upload size were read from the AJAX request rather than from the saved settings, so a tampered request could ignore the site owner’s limits. Both are now enforced server side.
• Fix – Security: the upload and remove handlers were registered for logged-out visitors. A file was written and a media attachment created before the handler checked who was asking. Both now require a logged-in user.
• Fix – Uploaded file types are validated from the file’s real contents with wp_check_filetype_and_ext() instead of trusting the extension on the supplied filename.
• Fix – Cropping a PNG or GIF wrote JPEG data back under the original extension, losing transparency and flattening animation. Cropping now goes through WP_Image_Editor and preserves the source format.
• Fix – Cropping a WEBP upload failed outright — the crop had no WEBP branch and fell through to the JPEG decoder.
• Fix – Thumbnail sizes were generated from the uncropped upload. Cropping now happens before the attachment is created, so every generated size is cut from the final image.
• Fix – A failed upload no longer leaves an orphaned file behind in the uploads directory.
• Fix – The BuddyPress bp-disable-avatar-uploads option is only written when BuddyPress is actually installed.
• Tweak – The avatar directory is created on activation with wp_mkdir_p() instead of a mkdir( 0777 ) attempted on every request.

1.2.2 – 30-05-2026

• Fix – Design issue in Gutenberg block.

1.2.1 – 23-05-2026

• Enhance – WordPress 7.0 Compatibility.
• Tweak – Avatar uploaded success message design.
• Fix – Avatar Uploader interface not appearing.

1.2.0 – 20-05-2026

• Feature – Better Messages integration: custom avatars now appear in the Better Messages chat interface.
• Fix – WooCommerce integration conflicting with Bricks Builder and other page builders due to duplicate dashboard template rendering.
• Fix – Review notice not dismissing after clicking «Sure, I’d love to!» — the notice kept reappearing on every admin page.
• Fix – wp_get_attachment_thumb_url() replaced with wp_get_attachment_image_url() (deprecated since WordPress 6.0).
• Fix – date_i18n() replaced with wp_date() (deprecated since WordPress 5.3).
• Fix – upload_dir filter was never properly removed after file upload due to an anonymous closure reference mismatch.
• Fix – size_format() was called on an already-formatted string, producing incorrect upload limit messages.
• Fix – remove_avatar() no longer runs when no user is logged in.
• Fix – Removed redundant double nonce verification in AJAX upload and remove handlers.
• Fix – maybe_later dismiss action now uses a transient; dismiss_notice() now includes a capability check.
• Fix – Leading space typo in WPMAKE_ADVANCE_USER_AVATAR_TEMPLATE_PATH constant definition.
• Dev – Updated minimum WordPress version requirement to 6.0.
• Fix – join() replaced with implode() throughout (PHPCS standard).
• Fix – $args['class'] now guarded with empty() to prevent PHP notices on non-standard calls.

1.1.2 – 15-11-2025

• Enhance – EXIF orientation metadata support.
• Dev – Brand Assets Updated.
• Fix – Images rotated when cropping from mobile phones.

1.1.1 – 11-06-2025

• Dev – WordPress 6.8 Compatibility.
• Tweak – Plugin Name Typo.

1.1.0 – 08-03-2025

• Feature – WooCommerce Integration.
• Feature – BuddyPress Integration.

1.0.3 – 05-01-2025

• Feature – Store avatar in different thumbnail sizes.
• Feature – Allow users to use camera or webcam to capture picture.
• Feature – Ability for site owner to change uploaded image’s width and height.
• Tweak – Updated Readme.

1.0.2 – 21-10-2024

• Tweak – Added a review prompt.
• Tweak – Updated admin footer text.

1.0.1 – 21-09-2024

• Enhance – Improved design for selecting file types in settings.
• Enhance – Better styling for upload success and error messages.
• Dev – Added compatibility with WordPress v6.7.
• Dev – Updated minimum WordPress version requirement to 5.5 for better block support.

1.0.0 – 11-09-2024

• Initial Release