This error doesn't come from wpForo. This is some security plugin or other type of plugin. Please deactivate all plugins and check it again. Then activate those one by one and find the problem maker plugin.
And something else: Can I set custom Default avatars for new users? If yes, where?
I'm sorry but there is no such an option.