PatchTheCVE: enable svg\, webp \& ico uploadhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-2143: The Enable SVG, WebP & ICO Upload WordPress plugin through 1.0.3 does not sanitize SVG file contents, leading https://patchthecve.com/cve/CVE-2023-2143.htmlhttps://patchthecve.com/cve/CVE-2023-2143.htmlWed, 17 Jun 2026 05:51:42 +0000MEDIUM 5.4: The Enable SVG, WebP & ICO Upload WordPress plugin through 1.0.3 does not sanitize SVG file contents, leading to a Cross-Site Scripting vulnerability.CVE-2022-36343: Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enabhttps://patchthecve.com/cve/CVE-2022-36343.htmlhttps://patchthecve.com/cve/CVE-2022-36343.htmlWed, 17 Jun 2026 04:53:17 +0000LOW 3.4: Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.CVE-2022-34154: Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebPhttps://patchthecve.com/cve/CVE-2022-34154.htmlhttps://patchthecve.com/cve/CVE-2022-34154.htmlWed, 17 Jun 2026 04:49:48 +0000HIGH 7.2: Authenticated (author or higher user role) Arbitrary File Upload vulnerability in ideasToCode Enable SVG, WebP & ICO Upload plugin <= 1.0.1 at WordPress.