GCVE - cpe:2.3:a:wp_svg_icons_project:wp_svg_icons:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wp_svg_icons_project:wp_svg_icons:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Wp Svg Icons Project (`7a5117f0-0a22-5837-8dfb-59487f240e76`)
Product	Wp Svg Icons (`4406c854-78ca-5620-83d6-100af03e0154`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-0863`	vulnerable	2026-06-08 05:39:11.372844	WP SVG Icons <= 3.2.3 - Admin+ Remote Code Execution (RCE) The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution. Published: 2022-06-13T12:41:37.000Z Updated: 2024-08-02T23:40:04.479Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/a30212a0-c910-4657-aee1-4a2d72c77983	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-14216`	vulnerable	2026-06-08 05:12:54.276313	Details available An issue was discovered in the svg-vector-icon-plugin (aka WP SVG Icons) plugin through 3.2.1 for WordPress. wp-admin/admin.php?page=wp-svg-icons-custom-set mishandles Custom Icon uploads. CSRF leads to upload of a ZIP archive containing a .php file. Published: 2019-08-14T20:03:03.000Z Updated: 2024-08-05T00:12:42.853Z Open on db.gcve.eu Reference links https://zeroauth.ltd/blog/2019/08/09/cve-2019-14216-svg-vector-icon-plugin-wordpress-plugin-vulnerable-to-csrf-and-arbitrary-file-upload-leading-to-remote-code-execution/ https://wpvulndb.com/vulnerabilities/9510	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.