Description of the Change

Minor hardening of code following limited review against WP and VIP Coding standards.

How to test the Change

Changelog Entry

Fixed - Ensure form data is unslashed as required
Changed - Consider get_avatar() wrapper function get_simple_local_avatar() escaped
Changed - Consider wp_verify_nonce() as auto-sanitized
Security - (Hardening) Ensure user has manage_option cap before saving default avatar.

Credits

Props @peterwilsoncc

Checklist:

• I agree to follow this project's Code of Conduct.
• I have updated the documentation accordingly.
• I have added Critical Flows, Test Cases, and/or End-to-End Tests to cover my change.
• All new and existing tests pass.