Support SVG – Upload svg files in wordpress without hassle

Support SVG – Upload svg files in wordpress without hassle has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Support SVG – Upload svg files in wordpress without hassle has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Support SVG – Upload svg files in wordpress without hassle is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Support SVG – Upload svg files in wordpress without hassle vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-11091

Support SVG – Upload svg files in wordpress without hassle <= 1.1.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG File Upload

Read the full analysis

Vulnerability Records

2 records


2024-11-25 20:18	Support SVG – Upload svg files in wordpress without hassle <= 1.1.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG File Upload Support SVG <= 1.1.0	`CVE-2024-11091`	6.4 Medium	Francesco Carlucci	Yes
2024-06-22 00:00	Support SVG <= 1.0.0 - Authenticated (Author+) Stored Cross-site Scripting via SVG Support SVG <= 1.0.0	`CVE-2024-4272`	6.4 Medium	Rayhan Ramdhany Hanaputra	Yes

Showing 1–2 of 2 reports

Latestv1.1.3

Support SVG – Upload svg files in wordpress without hassle

Author

Sayedul Sayem

0.0(0)

0/100

Last Updated

2026-01-20 (8mo ago)

Active Installs

20+

Downloads

3,138

Requires WP

5.0+

Requires PHP

7.4+

Tested up to

WP 6.9.7

Created

2023-10-04 (3y ago)

The SVG Support plugin enables SVG (Scalable Vector Graphics) support in WordPress. This lightweight plugin allows you to upload and use SVG files in your WordPress media library without any restrictions. This plugin is designed to be minimalistic and focuses solely on enabling SVG support. It does not enqueue any additional scripts or stylesheets in the frontend, ensuring it won’t affect the loading speed of your website. See plugin’s GitHub repo Support SVG Features Enables SVG uploads in WordPress media library Supports SVG thumbnail display in the Media Library Applies necessary security measures to sanitize SVG uploads Lightweight and does not enqueue any frontend scripts or stylesheets PRIVACY POLICY This plugin does not collect, log, sell or trade any kind of information about your website. You can easily verify that this plugin is not phoning home using a network traffic inspector like WireShark. ABOUT THE MAKER I am Sayedul Sayem, a Bangladeshi full-stack WordPress developer and free and open source enthusiast. You can contact me at my LinkedIn for consultation or just to say hello. I love talking to new people. So don’t hesitate.

View on WordPress.org