Approved changes feed: RSS · Atom

cpe:2.3:a:ideastocode:enable_svg\,_webp_\&_ico_upload:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorIdeastocode (079e9951-235d-5592-b1e9-2a618ffb9e9b)
ProductEnable Svg, Webp & Ico Upload (ec5a2e28-3a7c-541d-b665-4dffe0b0cfa3)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-2143 vulnerable 2026-06-08 06:02:41.492824 Enable SVG, WebP & ICO Upload <= 1.0.3 - Author+ Stored XSS
The Enable SVG, WebP & ICO Upload WordPress plugin through 1.0.3 does not sanitize SVG file contents, leading to a Cross-Site Scripting vulnerability.
Published: 2023-07-17T13:29:52.707Z
Updated: 2024-10-30T15:00:22.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36343 vulnerable 2026-06-08 05:46:06.974365 WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
LOW (3.4)
Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.
Published: 2022-08-01T13:55:00.671Z
Updated: 2026-04-28T16:07:45.538Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34154 vulnerable 2026-06-08 05:44:52.229783 WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability
HIGH (7.2)
Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.
Published: 2022-08-01T13:55:12.387Z
Updated: 2026-04-28T16:07:44.230Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.