CVE-2026-110504 | Enable SVG, WebP, and ICO Upload Plugin up to 1.1.5 on WordPress SVG File cross site scripting

October 29, 2026 Yanac

A vulnerability marked as problematic has been reported in Enable SVG, WebP, and ICO Upload Plugin up to 1.1.5 on WordPress. The affected element is an unknown function of the component SVG File Handler. Performing a manipulation results in cross site scripting.

This vulnerability was named CVE-2026-110504. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More