Vulnerabilities (CVE)

Filtered by vendor Ideastocode Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-2143 1 Ideastocode 1 Enable Svg\, Webp \& Ico Upload 2024-11-21 N/A 5.4 MEDIUM
The Enable SVG, WebP & ICO Upload WordPress plugin through 1.0.3 does not sanitize SVG file contents, leading to a Cross-Site Scripting vulnerability.
CVE-2022-36343 1 Ideastocode 1 Enable Svg\, Webp \& Ico Upload 2024-11-21 N/A 3.4 LOW
Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.
CVE-2022-34154 1 Ideastocode 1 Enable Svg\, Webp \& Ico Upload 2024-11-21 N/A 7.2 HIGH
Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.