ideasToCode vulnerabilities
We track 2 vulnerabilities in ideasToCode products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 18, 2025.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest ideasToCode vulnerabilities
- 8.8 High severity
Enable SVG, WebP, and ICO Upload: Unrestricted Upload of File with Dangerous Type
The Enable SVG, WebP, and ICO Upload plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1.1.3. This is due to insufficient file type validation detecting ICO files, allowing double extension files with the appropr
- 8.8 High severity
Enable SVG, WebP & ICO Upload (WordPress plugin): Unrestricted Upload of File with Dangerous Type
Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.