Skip to content
OpenAdvisories
High · 7.2 CVE-2022-34154 EUVD-2022-37169GHSA-9r23-xjjv-gr5j

WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability

Published Aug 1, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ideastocode Product: Enable SVG, WebP & ICO Upload (WordPress plugin) Category: Web / CMS

Description

Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.

Affected products

VendorProductAffectedFixed
ideasToCode Enable SVG, WebP & ICO Upload (WordPress plugin) <= 1.0.1 – ≤ 1.0.1 —

References