CVE-2024-11091

🗓️ 26 Nov 2024 08:31:54Reported by WordfenceType

CVE-2024-11091 Support SVG plugin vulnerabilit

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-11091	26 Nov 202408:43	–	circl
CNNVD	WordPress plugin Support SVG 跨站脚本漏洞	26 Nov 202400:00	–	cnnvd
Cvelist	CVE-2024-11091 Support SVG – Upload svg files in wordpress without hassle <= 1.1.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG File Upload	26 Nov 202408:31	–	cvelist
EUVD	EUVD-2024-33742	3 Oct 202520:07	–	euvd
NVD	CVE-2024-11091	26 Nov 202409:15	–	nvd
Patchstack	WordPress Support SVG <= 1.1.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG File Upload vulnerability	25 Nov 202421:44	–	patchstack
Patchstack	WordPress Support SVG Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)	25 Nov 202400:00	–	patchstack
Positive Technologies	PT-2024-16752 · WordPress · The Support Svg – Upload Svg Files In Wordpress Without Hassle	26 Nov 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-11091	23 May 202507:50	–	redhatcve
Vulnrichment	CVE-2024-11091 Support SVG – Upload svg files in wordpress without hassle <= 1.1.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG File Upload	26 Nov 202408:31	–	vulnrichment

Vulners

Node

sayedulsayem support_svg_upload_svg_files_in_wordpress_without_hassleRange≤1.1.0wordpress

[
  {
    "vendor": "sayedulsayem",
    "product": "Support SVG – Upload svg files in wordpress without hassle",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/support-svg/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/d9207baf-348c-4d3b-a6f0-cbfcd2624f78
plugins	www.plugins.trac.wordpress.org/changeset/3195829/

15 Apr 2026 00:35Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.16.4

EPSS0.00138

SSVC

CWE-79