← Back

Wphelpline

wphelpline

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Allow Svg
allow_svg

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Wphelpline
1Allow Svg
Jun 17, 2026
May 15, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The Allow SVG WordPress plugin before 1.2.0 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.