Skip to content
OpenAdvisories

Vendor

ideastocode

4 known vulnerabilities.

Products

Enable SVG, WebP & ICO Upload (WordPress plugin) 2 Enable SVG, WebP, and ICO Upload 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-13069

    Enable SVG, WebP, and ICO Upload <= 1.1.3 - Authenticated (Author+) Arbitrary File Upload via ICO Upload Bypass

    The Enable SVG, WebP, and ICO Upload plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1.1.3. This is due to insufficient file type validation detecting ICO files, allowing double extension files with the approp…

    ideastocode Enable SVG, WebP, and ICO Upload Web / CMS
  • High 7.2
    CVE-2022-34154

    WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability

    Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.

    ideastocode Enable SVG, WebP & ICO Upload (WordPress plugin) Web / CMS