CVE-2023-7085

Name of the Vulnerable Software and Affected Versions Scalable Vector Graphics (SVG) WordPress plugin versions through 3.4

Description The issue arises from the Scalable Vector Graphics (SVG) WordPress plugin's failure to sanitize uploaded SVG files. This could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads.

Recommendations For versions through 3.4, update to a version that sanitizes uploaded SVG files to prevent malicious uploads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.