Vulnerabilities / Safe SVG
Safe SVG vulnerabilities
Advisories WPSec published for Safe SVG. Other sources may list more. Its attack surface: Safe SVG on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-27 | WPSEC-2026-1787 | Safe SVG <= 2.5.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload | Medium 5.4 | 2.5.2 |
| 2026-10-27 | WPSEC-2026-1786 | Safe SVG <= 2.5.1 - Authenticated (Contributor+) CSS Injection via Safe SVG Block Attributes | Medium 5.0 | 2.5.2 |
License: CC BY 4.0