Plugin icon

SVG Support

svg-support

Vulnerabilities:

8

Last Updated:

July 25, 2026

Active Installs:

1000000

Published
Title
Fixed in
CVSS
Published
2026-07-24
Title
SVG Support < 2.5.17 - Author+ Stored XSS via .svgz Sanitization Bypass
Fixed in
Fixed in 2.5.17
CVSS
6.8 (medium)
Published
2026-05-27
Title
SVG Support < 2.5.15 - Contributor+ Missing Authorization
Fixed in
Fixed in 2.5.15
CVSS
4.3 (medium)
Published
2025-02-24
Title
SVG Support < 2.5.9 - Stored Cross-Site Scripting via Vulnerability Dependency
Fixed in
Fixed in 2.5.9
CVSS
5.4 (medium)
Published
2025-02-21
Title
SVG Support < 2.5.11 - Author+ Stored XSS via SVG File Upload
Fixed in
Fixed in 2.5.11
CVSS
5.5 (medium)
Published
2024-07-17
Title
SVG Support < 2.5.8 - Author+ Cross-Site Scripting via SVG
Fixed in
Fixed in 2.5.8
CVSS
4.0 (medium)
Published
2022-11-16
Title
SVG Support 2.5-2.5.1 - Author+ Stored XSS
Fixed in
Fixed in 2.5.2
CVSS
5.5 (medium)
Published
2022-09-05
Title
SVG Support < 2.5 - Author+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.5
CVSS
5.4 (medium)
Published
2022-01-03
Title
SVG Support < 2.3.20 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.3.20
CVSS
3.4 (low)