Exposure of SVG Support

WordPress plugins

13

exposure score

11,078

sites use

0

exploited

0

critical

CVEs

6 results

CVE-2022-1755MEDIUMSVG Support < 2.5 - Author+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2024-10222MEDIUMSVG Support <= 2.5.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.5%CVE-2022-4022MEDIUMThe SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1. SVG files containing malicious javascript are nEPSS 0.4%CVE-2023-6708MEDIUMSVG Support <= 2.5.7 - Authenticated (Author+) Cross-Site Scripting via SVGEPSS 0.3%CVE-2026-48973MEDIUMWordPress SVG Support plugin <= 2.5.14 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-13340MEDIUMSVG Support < 2.5.17 - Author+ Stored XSS via .svgz Sanitization BypassEPSS 0.2%