[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVozwjUNxnoxDds2bBdhbAQoXHvahccucDFEIodXoqiI":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":26,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":45,"crawl_stats":35,"alternatives":52,"analysis":155,"fingerprints":237},"easy-svg-upload","Easy SVG Upload","1.2","Delower Hossain","https:\u002F\u002Fprofiles.wordpress.org\u002Fwpdelower\u002F","\u003Cp>Easy SVG Upload is your go-to solution for safely enabling SVG uploads in WordPress. This powerful plugin empowers you to seamlessly incorporate SVG files into your website, all while ensuring they are meticulously sanitized to thwart any potential SVG\u002FXML vulnerabilities that could compromise your site’s security. Additionally, Easy SVG Upload offers the convenience of previewing your uploaded SVGs directly in the media library, across all views.\u003C\u002Fp>\n\u003Cp>With Easy SVG Upload, you can confidently embrace the creative potential of SVG files within your WordPress site, all within a secure and user-friendly environment.\u003C\u002Fp>\n\u003Ch4>Contributing & Bug Report\u003C\u002Fh4>\n\u003Cp>Bug reports and pull requests are welcome on \u003Ca href=\"https:\u002F\u002Fgithub.com\u002FWordPress-Satkhira-Community\u002Feasy-svg-upload\" rel=\"nofollow ugc\">Github\u003C\u002Fa>.\u003C\u002Fp>\n","The easiest way to upload svg image file in your WordPress Site.",10,500,0,"2025-10-06T14:54:00.000Z","6.8.5","6.0","8.0",[4,19,20,21,22],"file-type","mime-type","svg","svg-upload","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Feasy-svg-upload","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasy-svg-upload.1.2.zip",99,1,"2024-10-30 14:05:35","2026-03-15T14:54:45.397Z",[30],{"id":31,"url_slug":32,"title":33,"description":34,"plugin_slug":4,"theme_slug":35,"affected_versions":36,"patched_in_version":6,"severity":37,"cvss_score":38,"cvss_vector":39,"vuln_type":40,"published_date":27,"updated_date":41,"references":42,"days_to_patch":44},"CVE-2024-9708","easy-svg-upload-authenticated-author-stored-cross-site-scripting-via-svg-file-upload","Easy SVG Upload \u003C= 1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload","The Easy SVG Upload plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.",null,"\u003C=1.1","medium",6.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:C\u002FC:L\u002FI:L\u002FA:N","Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","2025-10-10 20:47:24",[43],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F49a9ade1-fca7-48c1-bb87-75fc3528e234?source=api-prod",345,{"slug":46,"display_name":7,"profile_url":8,"plugin_count":47,"total_installs":48,"avg_security_score":49,"avg_patch_time_days":44,"trust_score":50,"computed_at":51},"wpdelower",5,1250,100,79,"2026-04-04T13:47:24.578Z",[53,79,99,118,136],{"slug":54,"name":55,"version":56,"author":57,"author_profile":58,"description":59,"short_description":60,"active_installs":61,"downloaded":62,"rating":63,"num_ratings":64,"last_updated":65,"tested_up_to":66,"requires_at_least":67,"requires_php":68,"tags":69,"homepage":73,"download_link":74,"security_score":75,"vuln_count":76,"unpatched_count":13,"last_vuln_date":77,"fetched_at":78},"svg-support","SVG Support","2.5.14","Benbodhi","https:\u002F\u002Fprofiles.wordpress.org\u002Fbenbodhi\u002F","\u003Cp>\u003Cstrong>The complete SVG solution for WordPress – secure, flexible, and easy to use.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>SVG Support enables secure SVG uploads with powerful features for both basic users and developers:\u003C\u002Fp>\n\u003Cp>✨ \u003Cstrong>Key Features\u003C\u002Fstrong>:\u003Cbr \u002F>\n– Secure SVG uploads with automatic sanitization\u003Cbr \u002F>\n– Inline rendering for direct CSS\u002FJS manipulation\u003Cbr \u002F>\n– File size optimization through minification\u003Cbr \u002F>\n– Role-based access control\u003Cbr \u002F>\n– Advanced developer options\u003Cbr \u002F>\n– Multisite compatible\u003Cbr \u002F>\n– Full Block Editor (Gutenberg) compatibility\u003C\u002Fp>\n\u003Cp>🔒 \u003Cstrong>Security First\u003C\u002Fstrong>:\u003Cbr \u002F>\n– Built-in sanitization removes potentially harmful code\u003Cbr \u002F>\n– Role-based upload restrictions\u003Cbr \u002F>\n– Comprehensive MIME type validation\u003C\u002Fp>\n\u003Cp>🎨 \u003Cstrong>Designer Friendly\u003C\u002Fstrong>:\u003Cbr \u002F>\n– Direct styling of SVG elements\u003Cbr \u002F>\n– Animation support\u003Cbr \u002F>\n– Custom class targeting\u003Cbr \u002F>\n– Automatic dimension handling\u003C\u002Fp>\n\u003Cp>💻 \u003Cstrong>Developer Ready\u003C\u002Fstrong>:\u003Cbr \u002F>\n– Advanced mode for additional features\u003Cbr \u002F>\n– REST API support\u003Cbr \u002F>\n– Gutenberg compatible\u003Cbr \u002F>\n– Extensive hooks and filters\u003C\u002Fp>\n\u003Ch3>Usage\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Basic Usage\u003C\u002Fstrong>:\u003Cbr \u002F>\n– First, install and activate SVG Support via your WordPress dashboard\u003Cbr \u002F>\n– Upload SVG files to your media library like any other image\u003Cbr \u002F>\n– Works seamlessly with Image blocks, Cover blocks and featured images\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Advanced Usage\u003C\u002Fstrong>:\u003Cbr \u002F>\n– Enable “Advanced Mode” for minification and inline rendering\u003Cbr \u002F>\n– Customize with hooks and filters for tailored functionality\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Block Editor Usage\u003C\u002Fstrong>:\u003Cbr \u002F>\n– Use Advanced Mode to enable inline rendering:\u003Cbr \u002F>\n  – Add the \u003Ccode>\"style-svg\"\u003C\u002Fcode> class to Image blocks\u003Cbr \u002F>\n  – Add the \u003Ccode>\"style-svg\"\u003C\u002Fcode> class to Cover blocks to render SVG backgrounds inline\u003Cbr \u002F>\n– Use “Skip Nested SVGs” setting to control inline rendering of SVGs within Cover blocks\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Classic Editor Usage\u003C\u002Fstrong>:\u003Cbr \u002F>\n– Use Advanced Mode to add the \u003Ccode>\"style-svg\"\u003C\u002Fcode> class to \u003Ccode>\u003Cimg>\u003C\u002Fcode> tags for inline rendering\u003Cbr \u002F>\n– Enable “Auto Insert Class” option for automatic class insertion in Classic Editor\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Common Issues & Solutions\u003C\u002Fstrong>:\u003Cbr \u002F>\n– SVG not displaying? Ensure dimensions are set in CSS.\u003Cbr \u002F>\n– Need help? Use the support tab and I will do my best to assist you.\u003C\u002Fp>\n\u003Ch3>Spin up a test site\u003C\u002Fh3>\n\u003Cp>With a single click, you can spin up a completely free test site to test SVG Support using TasteWP! No sign up, no cards, nothing! How cool is that? Give it a go:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Ftastewp.com\u002Fnew?pre-installed-plugin-slug=svg-support&redirect=options-general.php%3Fpage%3Dsvg-support&ni=true\" rel=\"nofollow ugc\">Click Here to spin up a test site in seconds\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Security\u003C\u002Fh3>\n\u003Cp>SVG Support prioritizes security with automatic sanitization and role-based restrictions. Only trusted users should have upload permissions. Configure settings to balance functionality and security.\u003C\u002Fp>\n\u003Ch3>Feedback\u003C\u002Fh3>\n\u003Cp>I’m open to your \u003Ca href=\"mailto:wp@benbodhi.com\" rel=\"nofollow ugc\">suggestions and feedback\u003C\u002Fa> – Thanks for using SVG Support!\u003C\u002Fp>\n\u003Cp>Follow \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fsvgsupport\" rel=\"nofollow ugc\">@SVGSupport\u003C\u002Fa> on Twitter\u003Cbr \u002F>\nFollow \u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Fbenbodhi\" rel=\"nofollow ugc\">@benbodhi\u003C\u002Fa> on Twitter\u003Cbr \u002F>\nFollow \u003Ca href=\"https:\u002F\u002Fwarpcast.com\u002Fbenbodhi\" rel=\"nofollow ugc\">@benbodhi\u003C\u002Fa> on Warpcast\u003C\u002Fp>\n\u003Cp>\u003Cem>Note:\u003C\u002Fem> I hope you like this plugin! Please take a moment to \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fview\u002Fplugin-reviews\u002Fsvg-support?filter=5#postform\" rel=\"ugc\">rate it\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Development & Contributing\u003C\u002Fh3>\n\u003Cp>The development version of SVG Support is maintained on GitHub. Feel free to contribute:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Submit bug reports or feature suggestions: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbenbodhi\u002Fsvg-support\u002Fissues\" rel=\"nofollow ugc\">GitHub Issues\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Contribute code via \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbenbodhi\u002Fsvg-support\u002Fpulls\" rel=\"nofollow ugc\">Pull Requests\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Development repository: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fbenbodhi\u002Fsvg-support\" rel=\"nofollow ugc\">GitHub\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cp>Contribute translations \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fsvg-support\" rel=\"nofollow ugc\">here\u003C\u002Fa>. New to translating? Check the \u003Ca href=\"https:\u002F\u002Fmake.wordpress.org\u002Fpolyglots\u002Fhandbook\u002Ftools\u002Fglotpress-translate-wordpress-org\u002F\" rel=\"nofollow ugc\">Translator Handbook\u003C\u002Fa>.\u003C\u002Fp>\n","Securely upload SVG files to your media library, with built-in sanitization and advanced features for styling and animation.",1000000,12632236,96,354,"2025-02-25T08:34:00.000Z","6.7.5","5.8","7.4",[20,70,71,21,72],"safe-svg","sanitization","vector","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsvg-support\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsvg-support.2.5.14.zip",89,6,"2025-02-24 00:00:00","2026-03-15T15:16:48.613Z",{"slug":80,"name":81,"version":82,"author":83,"author_profile":84,"description":85,"short_description":86,"active_installs":87,"downloaded":88,"rating":49,"num_ratings":89,"last_updated":90,"tested_up_to":91,"requires_at_least":92,"requires_php":93,"tags":94,"homepage":95,"download_link":96,"security_score":25,"vuln_count":97,"unpatched_count":13,"last_vuln_date":98,"fetched_at":78},"wp-svg-images","WP SVG Images","4.4","ShortPixel","https:\u002F\u002Fprofiles.wordpress.org\u002Fshortpixel\u002F","\u003Cp>\u003Cstrong>Securely upload SVG files to your Media Library. Uploaded SVG files are automatically sanitized.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>SVG stands for \u003Ca href=\"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FScalable_Vector_Graphics\" rel=\"nofollow ugc\">Scalable Vector Graphics\u003C\u002Fa> and is probably the most efficient way to display images.\u003Cbr \u002F>\nWP SVG Images Plugin is an \u003Cstrong>easy-to-use and lightweight plugin\u003C\u002Fstrong> that allows you to upload SVG files to your media library safely and easily.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Support for SVG uploads to your Media Library.\u003C\u002Fli>\n\u003Cli>Sanitize uploaded SVG files. Malicious SVG\u002FXML files are rejected from upload.\u003C\u002Fli>\n\u003Cli>Admin configurable SVG support for different user roles. Ability to disable SVG upload for different user roles.\u003C\u002Fli>\n\u003Cli>Different user roles can upload and\u002For sanitize the uploaded SVG images.\u003C\u002Fli>\n\u003Cli>SVG preview in Media Library.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Support\u003C\u002Fh4>\n\u003Cp>24\u002F7 SVG support offered by \u003Ca href=\"https:\u002F\u002Fshortpixel.com\" rel=\"nofollow ugc\">ShortPixel\u003C\u002Fa> \u003Ca href=\"https:\u002F\u002Fshortpixel.com\u002Fcontact\" rel=\"nofollow ugc\">here\u003C\u002Fa> or \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fwp-svg-images\u002F\" rel=\"ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Recommended plugins\u003C\u002Fh4>\n\u003Cp>This plugin is supported & maintained by \u003Ca href=\"https:\u002F\u002Fshortpixel.com\u002F\" rel=\"nofollow ugc\">ShortPixel\u003C\u002Fa>.\u003Cbr \u002F>\nOther popular plugins by ShortPixel:\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Ffastpixel-website-accelerator\u002F\" rel=\"ugc\">FastPixel Caching\u003C\u002Fa> – WP Optimization made easy\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fshortpixel-image-optimiser\u002F\" rel=\"ugc\">ShortPixel Image Optimizer\u003C\u002Fa> – Image optimization & compression for all the images on your website, including WebP delivery – ShortPixel Image Optimizer.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fshortpixel-adaptive-images\u002F\" rel=\"ugc\">ShortPixel Adaptive Images\u003C\u002Fa> – On-the-fly image optimization & CDN delivery.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fenable-media-replace\u002F\" rel=\"ugc\">Enable Media Replace\u003C\u002Fa> – Easily replace images or files in Media Library.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fregenerate-thumbnails-advanced\u002F\" rel=\"ugc\">reGenerate Thumbnails Advanced\u003C\u002Fa> – Easily regenerate thumbnails.\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fresize-image-after-upload\u002F\" rel=\"ugc\">Resize Image After Upload\u003C\u002Fa> – Automatically resize each uploaded image.\u003C\u002Fp>\n\u003Ch3>Hooks for developers\u003C\u002Fh3>\n\u003Ch4>WPSVG_setAllowedTags\u003C\u002Fh4>\n\u003Cp>Allows you to specify more tags that will be not removed during sanitization\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter( 'WPSVG_setAllowedTags', 'my_custom_allowed_svg_tags', 10, 1 );\nfunction my_custom_allowed_svg_tags( $tags ){\n    $tags[] = 'path';\n    return $tags;\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Ch4>WPSVG_setAllowedAttrs\u003C\u002Fh4>\n\u003Cp>Allows you to specify more attributes that will be not removed during sanitization\u003C\u002Fp>\n\u003Cpre>\u003Ccode>add_filter( 'WPSVG_setAllowedAttrs', 'my_custom_allowed_svg_attributes', 10, 1 );\nfunction my_custom_allowed_svg_attributes( $attributes ){\n    $attributes[] = 'fill';\n    return $attributes;\n}\n\u003C\u002Fcode>\u003C\u002Fpre>\n","Add SVG support to your WP website. Securely upload SVG files, automatic sanitization, Media Library preview.",30000,304959,12,"2025-12-10T11:53:00.000Z","6.9.4","3.0.1","5.6.40",[71,21,54,22],"https:\u002F\u002Fshortpixel.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwp-svg-images.4.4.zip",2,"2024-06-20 00:00:00",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":107,"downloaded":108,"rating":109,"num_ratings":11,"last_updated":110,"tested_up_to":91,"requires_at_least":111,"requires_php":17,"tags":112,"homepage":116,"download_link":117,"security_score":49,"vuln_count":13,"unpatched_count":13,"last_vuln_date":35,"fetched_at":78},"mime-types-plus","Mime Types Plus","2.05","Katsushi Kawamori","https:\u002F\u002Fprofiles.wordpress.org\u002Fkatsushi-kawamori\u002F","\u003Ch4>Edit Mime Type\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Add Mime Type\u003C\u002Fli>\n\u003Cli>Remove Mime Type\u003C\u002Fli>\n\u003Cli>Change File Type\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Edit Users\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Specify uploadable extensions for each user\u003C\u002Fli>\n\u003Cli>Specify non-uploadable extensions for each user\u003C\u002Fli>\n\u003C\u002Ful>\n","Add the mime type that can be used in the media library to each file type.",10000,85682,76,"2025-11-25T21:57:00.000Z","4.7",[19,113,114,115],"filename-extention","media-library","mime-types","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fmime-types-plus\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmime-types-plus.2.05.zip",{"slug":119,"name":120,"version":121,"author":122,"author_profile":123,"description":124,"short_description":125,"active_installs":126,"downloaded":127,"rating":49,"num_ratings":97,"last_updated":128,"tested_up_to":91,"requires_at_least":129,"requires_php":130,"tags":131,"homepage":134,"download_link":135,"security_score":49,"vuln_count":13,"unpatched_count":13,"last_vuln_date":35,"fetched_at":78},"upload-svg","Upload SVG","1.0.3","html5maps","https:\u002F\u002Fprofiles.wordpress.org\u002Fhtml5maps\u002F","\u003Cp>Upload SVG is a secure and user-friendly WordPress plugin that allows you to safely upload and manage SVG files in your Media Library. SVG files can potentially contain malicious code, but with Upload SVG, you can enable automatic sanitization to prevent XML\u002FSVG vulnerabilities on your website. This plugin ensures your SVG uploads are handled with enhanced security while offering a seamless user experience.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Securely upload SVG files to your Media Library.\u003C\u002Fli>\n\u003Cli>Enable automatic sanitization to protect against XML\u002FSVG vulnerabilities.\u003C\u002Fli>\n\u003Cli>Effortlessly manage and preview SVG files in your Media Library.\u003C\u002Fli>\n\u003Cli>Restrict SVG uploads to trusted user roles for additional security.\u003C\u002Fli>\n\u003Cli>Seamless integration with the latest version of WordPress.\u003C\u002Fli>\n\u003Cli>Lightweight and optimized for optimal performance.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>SVG Sanitization is implemented using the following library: \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Fdarylldoyle\u002Fsvg-sanitizer\" rel=\"nofollow ugc\">https:\u002F\u002Fgithub.com\u002Fdarylldoyle\u002Fsvg-sanitizer\u003C\u002Fa>.\u003C\u002Fp>\n","Safely enable SVG uploads with sanitization and prevent XML\u002FSVG vulnerabilities on your WordPress website. Preview SVG files in your Media Library.",1000,8429,"2025-12-03T15:44:00.000Z","5.7","7.1",[132,21,54,22,133],"sanitize","upload","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fupload-svg.1.0.3.zip",{"slug":137,"name":138,"version":139,"author":140,"author_profile":141,"description":142,"short_description":143,"active_installs":144,"downloaded":145,"rating":13,"num_ratings":13,"last_updated":146,"tested_up_to":15,"requires_at_least":147,"requires_php":148,"tags":149,"homepage":153,"download_link":154,"security_score":49,"vuln_count":13,"unpatched_count":13,"last_vuln_date":35,"fetched_at":78},"custom-mime-types","Custom Mime Types","1.2.0","Jafran Hasan","https:\u002F\u002Fprofiles.wordpress.org\u002Fiamjafran\u002F","\u003Cp>Easily manage and customize allowed file types on your WordPress site. Add or remove mime types, set file size limits, and control who can upload what — all from a simple and intuitive interface.\u003C\u002Fp>\n\u003Cp>** Version 2.0 will be in the mid of August 2025, and then this plugin will be actively managed by owner. **\u003C\u002Fp>\n\u003Cp>Perfect for developers, admins, and anyone who wants more control over media uploads.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>🎯 \u003Cstrong>Key Features (Free & Awesome):\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>✅ \u003Cstrong>Enable\u002FDisable Mime Types\u003C\u002Fstrong>\u003Cbr \u002F>\nQuickly toggle specific mime types on or off from a clean interface. No code needed.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>➕ \u003Cstrong>Add Custom Mime Types\u003C\u002Fstrong>\u003Cbr \u002F>\nAdd new mime types with custom extensions effortlessly. Includes a large library of pre-defined mime suggestions to choose from.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>🔐 \u003Cstrong>Set Role-Based Upload Permissions\u003C\u002Fstrong>\u003Cbr \u002F>\nControl which user roles can upload which file types. For example, allow \u003Ccode>.svg\u003C\u002Fcode> for admins only.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>📦 \u003Cstrong>Customize Maximum Upload Size\u003C\u002Fstrong>\u003Cbr \u002F>\nSet file size upload limits globally or per mime type — great for managing storage.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>More Awesome Plugins\u003C\u002Fh3>\n\u003Cp>❤️ Love this plugin? You might also like:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>⚡ \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fajaxpress\u002F\" rel=\"ugc\">AjaxPress\u003C\u002Fa> – Instantly convert your WordPress site into a fast, single-page-like experience.\u003C\u002Fli>\n\u003C\u002Ful>\n","Easily manage and customize allowed file types on your WordPress site. Add or remove mime types, set file size limits, and control who can upload what …",30,1699,"2025-07-06T18:24:00.000Z","5.0","5.4",[150,151,152,115,133],"custom-mime","file-size","file-types","https:\u002F\u002Freturnxero.com\u002Fcustom-mime-types\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcustom-mime-types.1.2.0.zip",{"attackSurface":156,"codeSignals":206,"taintFlows":224,"riskAssessment":225,"analyzedAt":236},{"hooks":157,"ajaxHandlers":202,"restRoutes":203,"shortcodes":204,"cronEvents":205,"entryPointCount":13,"unprotectedCount":13},[158,163,166,170,173,178,182,186,190,194,198],{"type":159,"name":160,"callback":161,"file":162,"line":144},"action","plugins_loaded","esup_load_textdomain","easy-svg-upload.php",{"type":159,"name":160,"callback":164,"priority":47,"file":162,"line":165},"esup_maybe_load_sanitizer",70,{"type":159,"name":167,"callback":168,"file":162,"line":169},"admin_init","esup_easy_svg_upload_initialize_options",92,{"type":159,"name":167,"callback":171,"file":162,"line":172},"esup_easy_svg_upload_register_settings",131,{"type":174,"name":175,"callback":176,"file":162,"line":177},"filter","upload_mimes","esup_easy_svg_upload_type",170,{"type":174,"name":179,"callback":180,"priority":11,"file":162,"line":181},"wp_check_filetype_and_ext","esup_check_filetype_and_ext",184,{"type":174,"name":183,"callback":184,"file":162,"line":185},"wp_handle_upload_prefilter","esup_upload_prefilter",217,{"type":174,"name":187,"callback":188,"file":162,"line":189},"wp_handle_upload","esup_handle_upload",240,{"type":159,"name":191,"callback":192,"file":162,"line":193},"admin_menu","esup_easy_svg_upload_options_page",316,{"type":159,"name":195,"callback":196,"file":162,"line":197},"admin_notices","closure",408,{"type":159,"name":199,"callback":200,"file":162,"line":201},"activated_plugin","esup_activation_redirect",450,[],[],[],[],{"dangerousFunctions":207,"sqlUsage":208,"outputEscaping":210,"fileOperations":211,"externalRequests":13,"nonceChecks":13,"capabilityChecks":47,"bundledLibraries":223},[],{"prepared":13,"raw":13,"locations":209},[],{"escaped":211,"rawEcho":212,"locations":213},3,4,[214,217,219,221],{"file":162,"line":215,"context":216},330,"raw output",{"file":162,"line":218,"context":216},364,{"file":162,"line":220,"context":216},383,{"file":162,"line":222,"context":216},424,[],[],{"summary":226,"deductions":227},"The \"easy-svg-upload\" v1.2 plugin exhibits a mixed security posture. While the static analysis indicates a small attack surface with no directly identifiable unprotected entry points, this is somewhat undermined by a concerning percentage of improperly escaped output and a lack of nonce checks. The absence of any taint analysis findings is a positive sign, suggesting no obvious critical vulnerabilities were detected by that method.  However, the plugin's vulnerability history is a significant concern.  A known medium-severity CVE related to Cross-site Scripting (XSS) was recently discovered and patched. The recurrence of such vulnerabilities, even if patched, points to potential ongoing weaknesses in input sanitization and output escaping that attackers could exploit. The presence of file operations without further context also warrants caution, as these can be risky if not handled with extreme care.  Overall, while the plugin has taken steps to secure its entry points and use prepared statements for SQL, the history of XSS vulnerabilities and the observed output escaping issues suggest a need for continued vigilance and thorough auditing of its handling of user-provided data.",[228,230,232,234],{"reason":229,"points":11},"Medium severity CVE history",{"reason":231,"points":76},"Low output escaping percentage",{"reason":233,"points":47},"No nonce checks",{"reason":235,"points":211},"File operations present","2026-03-16T23:36:47.343Z",{"wat":238,"direct":244},{"assetPaths":239,"generatorPatterns":241,"scriptPaths":242,"versionParams":243},[240],"\u002Fwp-content\u002Fplugins\u002Feasy-svg-upload\u002Flib\u002Fsvg-sanitize\u002Fsrc\u002Fsvg-sanitize.php",[],[],[],{"cssClasses":245,"htmlComments":246,"htmlAttributes":247,"restEndpoints":251,"jsGlobals":252,"shortcodeOutput":253},[],[],[248,249,250],"esup_enable_easy_svg_upload","esup_allow_authors","esup_max_svg_kb",[],[],[]]