Login Request a demo
SS
Product
Safe SVG
by 10up · last CVE Sep 30, 2026
6
CVEs
0
On KEV
7.5
Max CVSS
2
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 4Low 0
Severity
All severities6Critical0High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Safe SVG to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-18855
7.5
3%
Nov 11
A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to potentially unwanted elements or attributes
Affected: through 1.9.4
CVE-2019-18854
7.5
3%
Nov 11
A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to unlimited recursion for a '<use
Affected: through 1.9.4
CVE-2026-94077
6.5
0%
Sep 30
WordPress Safe SVG plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.5.0
CVE-2022-1091
6.1
1%
Apr 18
The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file
Affected: before 1.9.10
CVE-2024-8378
4.8
0%
Nov 7
Safe SVG < 2.2.6 - Author+ SVG Sanitisation Bypass
Affected: before 2.2.6
CVE-2026-94672
4.3
0%
Sep 30
WordPress Safe SVG plugin <= 2.5.0 - Insecure Direct Object References (IDOR) vulnerability
Affected: through 2.5.0
Showing 6