Easy SVG Support
Easy SVG Support has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).
Every one of the 3 issues recorded for Easy SVG Support has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Easy SVG Support is installed on roughly 40,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2024-10269Easy SVG Support <= 3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Read the full analysisVulnerability Records
Easy SVG Support
Author
Benjamin Zekavica
Direct Upload SVG Files into WordPress EASY SVG Support is a Plugin which allows you to upload SVG Files into your Media library. This plugin was created for persons, who don’t need much options for SVG. Features of the plugin include: Uploading SVG Support for WordPress Easy installation Display SVG Files in the Media Libary SVG Sanitize Files direcly SVG Sanitize – Custom Hooks for Tags and Attributes Updated for the new WordPress Gutenberg Editor Support for PHP 8.2 Documentation & Support Got a problem or need help with Easy SVG Support? Than you can write me an e-mail: info@benjamin-zekavica.de or you can ask your question in the forums section.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C