Wphelpline

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Wphelpline records in CISA KEV

No Wphelpline vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Allow Svg 1 record MEDIUM

Records

1 record

TI-2023-05994 CVE-2023-6541 · GHSA-rf8c-553r-qgf7

Allow SVG < 1.2.0 - Author+ Stored XSS via SVG

MEDIUM 60

The Allow SVG WordPress plugin before 1.2.0 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0039 Published 2025-05-15 Fixed in 1.2.0 CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0