PLUGIN SECURITY
Securely upload SVG files to your media library, with built-in sanitization and advanced features for styling and animation.
svg-vector-icon-pluginmime typesafe svgsanitizationSVGVector
2 known CVEs on file for Svg Vector Icon Plugin. Reported between 2019 and 2022.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2022-0863 | WP SVG Icons [svg-vector-icon-plugin] <= 3.2.3 (unfixed + closed) | Unrestricted Upload of File with Dangerous Type | High 7.2 | < 3.2.3 | 3.2.3 | 2022-05-18 | — |
| CVE-2019-14216 | WP SVG Icons [svg-vector-icon-plugin] < 3.2.3 (closed) | Cross-Site Request Forgery (CSRF) | High 8.8 | < 3.2.3 | 3.2.3 | 2019-08-09 | — |
Authenticated Remote Code Execution (RCE) vulnerability discovered by qerogram in WordPress WP SVG Icons plugin (versions <= 3.2.3). Deactivate and delete. This plugin has been closed as of April 18, 2022 and is not available for download. This closure is temporary, pending a full review.
Source: Patchstack
An issue was discovered in the svg-vector-icon-plugin (aka WP SVG Icons) plugin through 3.2.1 for WordPress. wp-admin/admin.php?page=wp-svg-icons-custom-set mishandles Custom Icon uploads. CSRF leads to upload of a ZIP archive containing a .php file.
Source: CVE.org
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.