Vulnerability Records

6 records
Safe SVG banner
Latestv2.4.0

Safe SVG

10up

Author

10up

4.9(78)
98/100
Last Updated
2026-04-14 (4mo ago)
Active Installs
1,000,000+
Downloads
13,207,700
Requires WP
6.6+
Requires PHP
7.4+
Tested up to
WP 7.0.2
Created
2015-07-03 (11y ago)

Safe SVG is the best way to Allow SVG Uploads in WordPress! It gives you the ability to allow SVG uploads whilst making sure that they’re sanitized to stop SVG/XML vulnerabilities affecting your site. It also gives you the ability to preview your uploaded SVGs in the media library in all views. Current Features Sanitised SVGs – Don’t open up security holes in your WordPress site by allowing uploads of unsanitised files. SVGO Optimisation – Runs your SVGs through the SVGO tool on upload to save you space. This feature is disabled by default but can be enabled by adding the following code: add_filter( 'safe_svg_optimizer_enabled', '__return_true' ); View SVGs in the Media Library – Gone are the days of guessing which SVG is the correct one, we’ll enable SVG previews in the WordPress media library. Choose Who Can Upload – Restrict SVG uploads to certain users on your WordPress site or allow anyone to upload. Initially a proof of concept for #24251. SVG Sanitization is done through the following library: https://github.com/darylldoyle/svg-sanitizer. SVG Optimization is done through the following library: https://github.com/svg/svgo.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C