Svg Support (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-09. Vendor: Unknown.

CVEs of Svg Support

• CVE-2026-85418 - CVSS 5.4 (medium), 2026-09-09: The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.9 does not validate a user-supplied…
• CVE-2026-16583 - CVSS 6.1 (medium), 2026-08-05: The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize uploaded SVG files…
• CVE-2026-13340 - CVSS 6.1 (medium), 2026-08-03: The SVG Support WordPress plugin before 2.5.17 does not apply its SVG sanitisation to uploaded files using the .svgz extension, even though it registers and…
• CVE-2025-10874 - CVSS 5.5 (medium), 2025-10-24: The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used…
• CVE-2022-1755 - CVSS 5.4 (medium), 2022-09-26: The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform…