Read the docs

10up

Records23All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

10up records in CISA KEV

No 10up vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Safe Svg 4 records MEDIUM Elasticpress 2 records LOW Restricted Site Access 1 record MEDIUM Simple Local Avatars 1 record LOW

Records

4 records in Safe Svg · all components

TI-2024-07768 CVE-2024-8378 · GHSA-j7hj-68jp-pg28

Safe SVG < 2.2.6 - Author+ SVG Sanitisation Bypass

Priority MEDIUM 55

The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call wp_handle_upload, but not for example for code that uses wp_handle_sideload which is often used to upload attachmen…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0033 Published 2024-11-07 Fixed in 2.2.6
TI-2022-00986 CVE-2022-1091 · GHSA-5h7w-hmxc-99g5

Safe SVG < 1.9.10 - SVG Sanitisation Bypass

Priority LOW 30

The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01201 Published 2022-04-18 Fixed in 1.9.10 CWE-79
Open these records in search →