A security update with respect to custom avatars has been made by vBulletin in the following security patch.
You can download the patch for your version in the Member's Area
We have made patches available for the following versions of vBulletin Connect:
5.5.4 Patch Level 2
5.5.3 Patch Level 2...