Vulnerabilities (CVE)

Filtered by vendor Ablyperu Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-7086 1 Ablyperu 1 Svg Uploads Support 2025-06-12 N/A 5.4 MEDIUM
The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.