medium4.8
CVE-2024-11184
The wp-enable-svg WordPress plugin does not sanitize SVG files when uploaded
Impact
The wp-enable-svg WordPress plugin through 0.2 does not sanitize SVG files when uploaded, allowing for authors and above to upload SVGs containing malicious scripts
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | mwdelaney/wp-enable-svg | <= 0.2 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wp Enable Svg Project | Wp Enable Svg | through 0.7 |