Advisories · Technology

10up Safe SVG.

Every CVE that names 10up Safe SVG among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-94672 CVE record

CVSS 4.3 Medium

WordPress Safe SVG plugin <= 2.5.0 - Insecure Direct Object References (IDOR) vulnerability
- 10up Safe SVG
- Broken access control
Not analysed yet 30 Sept 2026
CVE-2026-94077 CVE record

CVSS 6.5 Medium

WordPress Safe SVG plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
- 10up Safe SVG
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026