CVE-2026-17019

JetEngine (WordPress) vulnerability CVE-2026-17019: versions before 3.8.13.1 fail to sanitise uploaded SVG files and do not sufficiently restrict upload access, enabling unauthenticated attackers to upload SVGs containing JavaScript that executes in the browser of any user who opens the file (Sto...