CVE · Medium

CVE-2026-48973 — SVG Support [svg-support] < 2.5.15

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-48973 SVG Support [svg-support] < 2.5.15 Missing Authorization Medium 4.3 < 2.5.15 2.5.15 2025-02-24

CVE-2026-48973

A security flaw has been identified in the SVG Support plugin for WordPress, affecting versions prior to or equal to 2.5.14. The issue arises from a lack of permission verification on a specific function, allowing users with at least contributor privileges to carry out unauthorized operations.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.