Log in Start free

ideasToCode

Products

ProductCVEsExploitedLatest
Enable SVG, WebP & ICO Upload (WordPress plugin)2–Aug 1, 2022
Enable SVG, WebP, and ICO Upload2–Nov 18, 2025

Exploited and recent CVEs

  • CVE-2025-12457 Medium 6.4 Enable SVG, WebP, and ICO Upload <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploads 0.2%
  • CVE-2025-13069 High 8.8 Enable SVG, WebP, and ICO Upload <= 1.1.3 - Authenticated (Author+) Arbitrary File Upload via ICO Upload Bypass 0.7%
  • CVE-2022-34154 High 7.2 WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability 1.3%
  • CVE-2022-36343 Low 3.4 WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%