PT-2023-20014

Name of the Vulnerable Software and Affected Versions Enable SVG Uploads WordPress plugin versions 2.1.5 and earlier Description The issue concerns the Enable SVG Uploads WordPress plugin, which fails to properly sanitise uploaded SVG files. This could potentially allow users with a role as low a...

CVE-2023-2529: Undefined Security Weakness

The Enable SVG Uploads WordPress plugin through 2.1.5 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads...