PT-2025-12856

Name of the Vulnerable Software and Affected Versions wp-svg-upload WordPress plugin version 1.0.0 Description The issue concerns the wp-svg-upload WordPress plugin, which does not sanitize SVG file contents. This enables users with at least the author role to upload SVG files with malicious...

CVE-2024-4270: Improper Neutralization of Input During Web Page Generation

The SVGMagic WordPress plugin through 1.1 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks...

CVE-2023-2143: Undefined Security Weakness

The Enable SVG, WebP & ICO Upload WordPress plugin through 1.0.3 does not sanitize SVG file contents, leading to a Cross-Site Scripting vulnerability...