Enable SVG, WebP, and ICO Upload vulnerabilities
2 known vulnerabilities in Enable SVG, WebP, and ICO Upload from ideasToCode. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
Enable SVG, WebP, and ICO Upload: Unrestricted Upload of File with Dangerous Type
The Enable SVG, WebP, and ICO Upload plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1.1.3. This is due to insufficient file type validation detecting ICO files, allowing double extension files with the appropr
- 8.8 High severity
Enable SVG, WebP & ICO Upload (WordPress plugin): Unrestricted Upload of File with Dangerous Type
Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.