Log in Start free

Benbodhi

Products

ProductCVEsExploitedLatest
SVG Support4–May 27, 2026

Exploited and recent CVEs

  • CVE-2026-48973 Medium 4.3 WordPress SVG Support plugin <= 2.5.14 - Broken Access Control vulnerability 0.2%
  • CVE-2024-10222 Medium 6.4 SVG Support <= 2.5.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.5%
  • CVE-2023-6708 Medium 5.4 SVG Support <= 2.5.7 - Authenticated (Author+) Cross-Site Scripting via SVG 0.3%
  • CVE-2022-4022 Medium 6.4 The SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. SVG files containing malicious javascript are not sanitized. While version 2.5 adds the ability to sanitize 0.5%