What’s Vulnerable › Products

ideastocode Enable SVG, WebP, and ICO Upload vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your ideastocode Enable SVG, WebP, and ICO Upload version is affected

Latest ideastocode Enable SVG, WebP, and ICO Upload vulnerabilities

• CVE-2025-13069 — Enable SVG, WebP, and ICO Upload <= 1.1.3 - Authenticated (Author+) Arbitrary File Upload via ICO Upload Bypass (CVSS 8.8)
• CVE-2025-12457 — Enable SVG, WebP, and ICO Upload <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploads (CVSS 6.4)