CVE-2019-18854

概要

参考情報

• fortiguard.com/zeroday/FG-VD-19-113 · Third Party Advisory
• plugins.trac.wordpress.org/changeset/2185438 · Third Party Advisory
• wordpress.org/plugins/safe-svg · Release Notes
• wpvulndb.com/vulnerabilities/9937 · Third Party Advisory

safe svg のその他の脆弱性

• CVE-2024-8378中 4.8The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call wp_handle_upload, but not for examp…
• CVE-2022-1091中 6.1The sanitisation step of the Safe SVG WordPress plugin before 1.9.10 can be bypassed by spoofing the content-type in the POST request to upl…
• CVE-2019-18855高 7.5A Denial Of Service vulnerability exists in the safe-svg (aka Safe SVG) plugin through 1.9.4 for WordPress, related to potentially unwanted …