SVG Support
svg-support · plugin
Known security vulnerabilities for SVG Support. Find out in seconds which version runs on your site with WP Lens.
4 known vulnerabilities
latest May 27, 2026
Vulnerabilities
- Medium 5.4
SVG Support <= 2.5.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- Medium 5.4
SVG Support <= 2.5.7 - Authenticated (Author+) Cross-Site Scripting via SVG
- Medium 5.4
The SVG Support plugin for WordPress defaults to insecure settings in version 2.5 and 2.5.1.
- Medium 4.3
WordPress SVG Support plugin <= 2.5.14 - Broken Access Control vulnerability