https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T11:29:04.355540+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-11457 EUVD-2026-11457 2026-10-10T11:29:04.358126+00:00 EUVD-2026-11457 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1091 fkie_cve-2022-1091 2026-10-10T11:29:04.358159+00:00

The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent (mainly XSS, but depending on further use of uploaded SVG files potentially other XML attacks).

 https://cve.radiocsirt.org/vuln/ghsa-5h7w-hmxc-99g5 GHSA-5h7w-hmxc-99g5 — Cross site scripting in safe-svg 2026-10-10T11:29:04.358191+00:00

Affected: Packagist: darylldoyle/safe-svg

The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upload a file. Exploiting this vulnerability, an attacker will be able to perform the kinds of attacks that this plugin should prevent (mainly XSS, but depending on further use of uploaded SVG files potentially other XML attacks).

 https://cve.radiocsirt.org/vuln/gsd-2022-1091 gsd-2022-1091 2026-10-10T11:29:04.358215+00:00 gsd-2022-1091