Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2023-2143

Disclosure Date: July 17, 2023 (last updated October 08, 2023)
The Enable SVG, WebP & ICO Upload WordPress plugin through 1.0.3 does not sanitize SVG file contents, leading to a Cross-Site Scripting vulnerability.
Attacker Value
Unknown

CVE-2022-34154

Disclosure Date: August 01, 2022 (last updated February 24, 2025)
Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.
Attacker Value
Unknown

CVE-2022-36343

Disclosure Date: August 01, 2022 (last updated February 24, 2025)
Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.