Easy SVG Upload
Easy SVG Upload has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Easy SVG Upload has a vendor fix available, so running the current release closes it.
All of these findings were reported by Francesco Carlucci. Easy SVG Upload is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2024-9708Easy SVG Upload <= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Read the full analysisVulnerability Records
Easy SVG Upload
Author
Delower Hossain
Easy SVG Upload is your go-to solution for safely enabling SVG uploads in WordPress. This powerful plugin empowers you to seamlessly incorporate SVG files into your website, all while ensuring they are meticulously sanitized to thwart any potential SVG/XML vulnerabilities that could compromise your site’s security. Additionally, Easy SVG Upload offers the convenience of previewing your uploaded SVGs directly in the media library, across all views. With Easy SVG Upload, you can confidently embrace the creative potential of SVG files within your WordPress site, all within a secure and user-friendly environment. Contributing & Bug Report Bug reports and pull requests are welcome on Github.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C