10up Safe Svg
4 CVEs affecting 10up Safe Svg. Latest disclosed: 2024-11-07. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-18855 | High | 7.5 | 2019-11-11 | A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attribu… |
CVE-2019-18854 | High | 7.5 | 2019-11-11 | A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to unlimited recursion for a '<use ... xlin… |
CVE-2022-1091 | Medium | 6.1 | 2022-04-18 | The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploit… |
CVE-2024-8378 | Medium | 4.8 | 2024-11-07 | The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call wp_handle_upload, but not for example for code that us… |