Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
Enable SVG, WebP, and ICO Upload CVE-2026-110505
The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not prevent animation elements in uploaded SVG files from changing a link's target to a
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
Enable SVG, WebP, and ICO Upload CVE-2026-110504
The Enable SVG, WebP, and ICO Upload WordPress plugin before 1.1.6 does not sanitize uploaded SVG files whose content is not detected as SVG, while still storin
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit