CVE-2023-2143: Ideastocode Enable Svg, WebP & Ico Upload

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

The Enable SVG, WebP & ICO Upload WordPress plugin through 1.0.3 does not sanitize SVG file contents, leading to a Cross-Site Scripting vulnerability.

Affected products

• Ideastocode Enable Svg, WebP & Ico Upload: up to and including 1.0.3

Published 2023-07-17. Last modified 2026-06-17.