Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2024-11-21
CVE-2022-2299 - Allow Svg Files Plugin
The Allow SVG Files WordPress plugin through 1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads
PLUGIN
Allow Svg Files
CVE-2022-2299
Risk Score
Threat Entry
Updated 2024-11-21
CVE-2022-1939 - Allow Svg Files Plugin
The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privilege users such as admin to upload PHP files even when they are not allowed to
PLUGIN
Allow Svg Files
CVE-2022-1939
Risk Score