Input validation vulnerability in SVG Support 2.5.10

The plugin for WordPress that supports SVG files is not secure and can be vulnerable to attacks. This is because it does not properly clean or protect the input and output of the files. As a result, someone with authorization, such as an administrator or author, could inject malicious code into pages that will run whenever the SVG file is accessed. Although this vulnerability is only exploitable by administrators by default, it can be extended to authors as well.