Safe Svg
by WordPress
Source repositories
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2019-18855 | Hig | 0.49 | 7.5 | 0.03 | Nov 11, 2019 | A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes. | ||
| CVE-2019-18854 | Hig | 0.49 | 7.5 | 0.03 | Nov 11, 2019 | A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to unlimited recursion for a '' substring. | ||
| CVE-2026-94077 | Med | 0.35 | 6.5 | 0.00 | Sep 30, 2026 | Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions. | ||
| CVE-2024-8378 | Med | 0.31 | 4.8 | 0.00 | Nov 7, 2024 | The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call wp_handle_upload, but not for example for code that uses wp_handle_sideload which is often used to upload attachments via raw POST data. | ||
| CVE-2026-94672 | Med | 0.21 | 4.3 | 0.00 | Sep 30, 2026 | Contributor Insecure Direct Object References (IDOR) in Safe SVG <= 2.5.0 versions. |
- risk 0.49cvss 7.5epss 0.03
A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes.
- risk 0.49cvss 7.5epss 0.03
A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to unlimited recursion for a '' substring.
- risk 0.35cvss 6.5epss 0.00
Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions.
- risk 0.31cvss 4.8epss 0.00
The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call wp_handle_upload, but not for example for code that uses wp_handle_sideload which is often used to upload attachments via raw POST data.
- risk 0.21cvss 4.3epss 0.00
Contributor Insecure Direct Object References (IDOR) in Safe SVG <= 2.5.0 versions.