https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T11:17:57.426154+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-225456 EUVD-2026-225456 2026-10-10T11:17:57.458641+00:00 EUVD-2026-225456 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11847 fkie_cve-2024-11847 2026-10-10T11:17:57.458679+00:00

The wp-svg-upload WordPress plugin through 1.0.0 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.

 https://cve.radiocsirt.org/vuln/ghsa-v2rr-fhv8-mx74 GHSA-v2rr-fhv8-mx74 — wp-svg-upload WordPress plugin vulnerable to Stored Cross-site Scripting 2026-10-10T11:17:57.458711+00:00

Affected: Packagist: digimix/wp-svg-upload

The wp-svg-upload WordPress plugin through 1.0.0 does not sanitize SVG file contents, which enables users with at least the author role to SVG with malicious JavaScript to conduct Stored XSS attacks.