Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: 10up Component: Safe Svg Clear all filters
TI-2024-07768 CVE-2024-8378 · GHSA-j7hj-68jp-pg28

Safe SVG < 2.2.6 - Author+ SVG Sanitisation Bypass

Priority MEDIUM 55

The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call wp_handle_upload, but not for example for code that uses wp_handle_sideload which is often used to upload attachmen…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0033 Published 2024-11-07 Fixed in 2.2.6
TI-2022-00986 CVE-2022-1091 · GHSA-5h7w-hmxc-99g5

Safe SVG < 1.9.10 - SVG Sanitisation Bypass

Priority LOW 30

The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01201 Published 2022-04-18 Fixed in 1.9.10 CWE-79