Lucene search

Enable SVG, WebP & ICO Upload Security Vulnerabilities

cve

CVE-2022-34154

Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.

8.8CVSS

8.6AI Score

0.001EPSS

2022-08-01 02:15 PM

cve

CVE-2022-36343

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.

5.4CVSS

5.2AI Score

0.001EPSS

2022-08-01 02:15 PM

cve

CVE-2023-2143

The Enable SVG, WebP & ICO Upload WordPress plugin through 1.0.3 does not sanitize SVG file contents, leading to a Cross-Site Scripting vulnerability.

5.4CVSS

5.5AI Score

0.0005EPSS

2023-07-17 02:15 PM