ideasToCode

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

ideasToCode records in CISA KEV

No ideasToCode vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Enable Svg, Webp & Ico Upload 3 records MEDIUM

Records

3 records in Enable Svg, Webp & Ico Upload · all components

TI-2023-02011 CVE-2023-2143 · GHSA-qx59-vmgp-6rg3

Enable SVG, WebP & ICO Upload <= 1.0.3 - Author+ Stored XSS

MEDIUM 58

The Enable SVG, WebP & ICO Upload WordPress plugin through 1.0.3 does not sanitize SVG file contents, leading to a Cross-Site Scripting vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00323 Published 2023-07-17 No fix listed

TI-2022-15070 CVE-2022-34154 · GHSA-9r23-xjjv-gr5j

WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability

MEDIUM 43

Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01282 Published 2022-08-01 No fix listed CWE-434

TI-2022-16685 CVE-2022-36343 · GHSA-6qmq-v879-phcg

WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

LOW 25

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00572 Published 2022-08-01 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0