CVE-2019-14216

An issue was discovered in the svg-vector-icon-plugin aka WP SVG Icons plugin through 3.2.1 for WordPress. wp-admin/admin.php?page=wp-svg-icons-custom-set mishandles Custom Icon uploads. CSRF leads to upload of a ZIP archive containing a .php file...

CVE-2019-14216

The CVE-2019-14216 issue affects the WordPress WP SVG Icons plugin (svg-vector-icon-plugin) up to version 3.2.1. The vulnerability arises from CSRF in wp-admin/admin.php?page=wp-svg-icons-custom-set, which mishandles Custom Icon uploads and allows an attacker to upload a ZIP containing a .php fil...

PT-2019-4687

Name of the Vulnerable Software and Affected Versions svg-vector-icon-plugin aka WP SVG Icons versions through 3.2.1 Description The issue concerns the mishandling of Custom Icon uploads in the svg-vector-icon-plugin, allowing for the upload of a ZIP archive containing a .php file due to...