Plugin icon

Enable SVG, WebP, and ICO Upload

enable-svg-webp-ico-upload

Vulnerabilities:

5

Last Updated:

December 4, 2025

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2025-11-17
Title
Enable SVG, WebP, and ICO Upload < 1.1.4 - Authenticated (Author+) Arbitrary File Upload via ICO Upload Bypass
Fixed in
Fixed in 1.1.4
CVSS
8.8 (high)
Published
2025-11-17
Title
Enable SVG, WebP, and ICO Upload < 1.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploads
Fixed in
Fixed in 1.1.3
CVSS
6.4 (medium)
Published
2023-06-23
Title
Enable SVG, WebP & ICO Upload < 1.1.1 - Author+ Stored XSS
Fixed in
Fixed in 1.1.1
CVSS
6.8 (medium)
Published
2022-08-01
Title
Enable SVG, WebP & ICO Upload < 1.0.7 - Author+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.0.7
CVSS
4.8 (medium)
Published
2022-08-01
Title
Enable SVG, WebP & ICO Upload < 1.1.1 - Author+ Arbitrary File Upload
Fixed in
Fixed in 1.1.1
CVSS
7.2 (high)