Ideastocode vulnerabilities

Products

• Enable Svg, Webp, And Ico Upload 4
• Enable Svg\, Webp \& Ico Upload 3
• Enable Svg, Webp & Ico Upload (wordpress Plugin) 2

Newest

• ideastocode enable svg, webp, and ico upload Enable SVG, WebP, and ICO Upload < 1.1.6 - Author+ Stored XSS via SMIL Animation Bypass CVE-2026-110505 6.8 MediumOctober 29, 2026
• ideastocode enable svg, webp, and ico upload Enable SVG, WebP, and ICO Upload 1.1.3 - 1.1.5 - Author+ Stored XSS via SVG Sanitization Bypass CVE-2026-110504 6.8 MediumOctober 29, 2026
• ideastocode enable svg, webp, and ico upload Enable SVG, WebP, and ICO Upload <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploads CVE-2025-12457 6.4 MediumNovember 18, 2025
• ideastocode enable svg, webp, and ico upload Enable SVG, WebP, and ICO Upload <= 1.1.3 - Authenticated (Author+) Arbitrary File Upload via ICO Upload Bypass CVE-2025-13069 8.8 HighNovember 18, 2025
• unknown enable svg, webp & ico upload, ideastocode enable svg\, webp \& ico upload +1 more Enable SVG, WebP & ICO Upload <= 1.0.3 - Author+ Stored XSS CVE-2023-2143 5.4 MediumJuly 17, 2023
• ideastocode enable svg, webp & ico upload (wordpress plugin), enable svg\, webp \& ico upload +1 more WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability CVE-2022-34154 7.2 HighAugust 1, 2022
• ideastocode enable svg, webp & ico upload (wordpress plugin), enable svg\, webp \& ico upload +1 more WordPress Enable SVG, WebP & ICO Upload plugin <= 1.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability CVE-2022-36343 3.4 LowAugust 1, 2022