WordPress security by component

AVIF & SVG Uploader

Plugin description

AVIF & SVG Uploader is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Oct 01, 2024; the highest CVE/CNA score is 6.4.

Plugin slug: avif-support

Latest vulnerability

CVE-2024-9060: AVIF & SVG Uploader: Cross-site scripting

AVIF & SVG Uploader is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedOct 01, 2024

Safe version guidanceSee mitigation notes

		Safe version
Oct 01, 2024	CVE-2024-9060 AVIF & SVG Uploader: Cross-site scripting AVIF & SVG Uploader is affected by cross-site scripting. Exploitation requires at least author-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVDPending