{"items":[{"id":"CVE-2025-12457","published":"2025-11-18T09:27:40.395Z","updated":"2026-04-08T17:26:14.186Z","title":"Enable SVG, WebP, and ICO Upload <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploads","severity":"MEDIUM","score":6.4,"vendor":"ideastocode","product":"Enable SVG, WebP, and ICO Upload","kev":false,"epss":0.00238,"kevAdded":null},{"id":"CVE-2025-13069","published":"2025-11-18T09:27:37.930Z","updated":"2026-04-08T16:54:17.983Z","title":"Enable SVG, WebP, and ICO Upload <= 1.1.3 - Authenticated (Author+) Arbitrary File Upload via ICO Upload Bypass","severity":"HIGH","score":8.8,"vendor":"ideastocode","product":"Enable SVG, WebP, and ICO Upload","kev":false,"epss":0.00689,"kevAdded":null},{"id":"CVE-2022-34154","published":"2022-08-01T13:55:12.387Z","updated":"2026-04-28T16:07:44.230Z","title":"WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability","severity":"HIGH","score":7.2,"vendor":"ideasToCode","product":"Enable SVG, WebP & ICO Upload (WordPress plugin)","kev":false,"epss":0.01282,"kevAdded":null},{"id":"CVE-2022-36343","published":"2022-08-01T13:55:00.671Z","updated":"2026-04-28T16:07:45.538Z","title":"WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability","severity":"LOW","score":3.4,"vendor":"ideasToCode","product":"Enable SVG, WebP & ICO Upload (WordPress plugin)","kev":false,"epss":0.00572,"kevAdded":null}]}