SS
Product
Safe SVG
6
CVEs
0
On KEV
7.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 2Medium 4Low 0
Watch
Add Safe SVG to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-94077 | 6.5 | Sep 30 | WordPress Safe SVG plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability Affected: through 2.5.0 |
| CVE-2022-1091 | 6.1 | Apr 18 | The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file Affected: before 1.9.10 |
| CVE-2024-8378 | 4.8 | Nov 7 | Safe SVG < 2.2.6 - Author+ SVG Sanitisation Bypass Affected: before 2.2.6 |
| CVE-2026-94672 | 4.3 | Sep 30 | WordPress Safe SVG plugin <= 2.5.0 - Insecure Direct Object References (IDOR) vulnerability Affected: through 2.5.0 |
Showing 4