I have another potential theory. Could you please check the authorized extensions site settings?
For custom avatars, you have to allow users to upload images.
If your setting looks like in the screenshot below, then admins/staff can upload avatars and regular users not.
