Allow Svg Files Project Allow Svg Files
2 CVEs affecting Allow Svg Files Project Allow Svg Files. Latest disclosed: 2022-07-25. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1939 | High | 7.2 | 2022-06-20 | The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privilege users such as admin to upload PHP f… |
CVE-2022-2299 | Medium | 5.4 | 2022-07-25 | The Allow SVG Files WordPress plugin through 1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicio… |