Description
Contributor Insecure Direct Object References (IDOR) in Safe SVG <= 2.5.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 10up | Safe SVG | ≤ 2.5.0 | — |
Medium · 4.3
CVE-2026-94672
EUVD-2026-89846GHSA-j739-p69x-4hw6
WordPress Safe SVG plugin <= 2.5.0 - Insecure Direct Object References (IDOR) vulnerability
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack