Vendors / ideasToCode Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now ideasToCode records in CISA KEV No ideasToCode vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 58
The Enable SVG, WebP & ICO Upload WordPress plugin through 1.0.3 does not sanitize SVG file contents, leading to a Cross-Site Scripting vulnerability.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00323 · Published 2023-07-17 · No fix listed
Priority MEDIUM 43
Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01282 · Published 2022-08-01 · No fix listed CWE-434
Priority MEDIUM 41
The Enable SVG, WebP, and ICO Upload plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1.1.3.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00689 · Published 2025-11-18 · No fix listed CWE-434
Priority LOW 28
The Enable SVG, WebP, and ICO Upload plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output es…
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00238 · Published 2025-11-18 · No fix listed CWE-79
Priority LOW 25
Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00572 · Published 2022-08-01 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 2 3 0 0
THREATIST.IORead the docs