4.8
Medium
CVE-2024-11184 The wp-enable-svg WordPress plugin through 0.7 does not sanitize SVG files when uploaded, allowing for authors and above…
Description
The wp-enable-svg WordPress plugin through 0.7 does not sanitize SVG files when uploaded, allowing for authors and above to upload SVGs containing malicious scripts
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| wp-enable-svg 0.7 | earliest → 0.7 | No fix stated |