Vulnerabilities > Ideastocode
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-07-17 | CVE-2023-2143 | Unspecified vulnerability in Ideastocode Enable Svg, Webp & ICO Upload 1.0.0/1.0.1/1.0.3 The Enable SVG, WebP & ICO Upload WordPress plugin through 1.0.3 does not sanitize SVG file contents, leading to a Cross-Site Scripting vulnerability. | 5.4 |
| 2022-08-01 | CVE-2022-34154 | Unrestricted Upload of File with Dangerous Type vulnerability in Ideastocode Enable Svg, Webp & ICO Upload 1.0.0/1.0.1 Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress. | 8.8 |
| 2022-08-01 | CVE-2022-36343 | Unspecified vulnerability in Ideastocode Enable Svg, Webp & ICO Upload 1.0.0/1.0.1 Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress. | 5.4 |