{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.2"}],"component":"mwdelaney/wp-enable-svg","cve_ids":["CVE-2024-11184"],"ecosystem":"Packagist","epss":0.00427,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-j77f-79w9-rghc","id":"tcs_01M5KF4BGR826MW6NHS2J5TGNV","modified_at":"2025-02-07T21:12:01.867422Z","published_at":"2025-01-02T06:30:47Z","references":["https://osv.dev/vulnerability/GHSA-j77f-79w9-rghc","https://nvd.nist.gov/vuln/detail/CVE-2024-11184","https://github.com/MWDelaney/wp-enable-svg","https://wpscan.com/vulnerability/fc982bcb-9974-481f-aef4-580ae9edc3c8"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-j77f-79w9-rghc","url":"https://osv.dev/vulnerability/GHSA-j77f-79w9-rghc"}],"summary":"The wp-enable-svg WordPress plugin does not sanitize SVG files when uploaded"}