Input validation vulnerability in SVG Uploads Support 2.1.1

The plugin called “SVG Uploads Support” for WordPress has a security issue that allows hackers to insert harmful code into certain pages. This can happen when they upload SVG files to the website. The problem is present in all versions up to 2.1.1 because the plugin does not properly clean and protect the input and output of the file. This means that if a hacker has author-level or higher access to the website, they can add malicious code to a page that will execute whenever someone visits that page.

Detected in:

SVG Uploads Support open vulnerable versions: >= * <= 2.1.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.