Wp Kses Svg
SVG uploads and sanitization for WordPress using wp_kses() — no external libraries. Proof of concept for Core Trac #24251.
by YOUR NAME HERE · github.com/camaleaun/wp-kses-svg · website
Install
The author publishes release zips, so WP-CLI can install straight from GitHub:
wp plugin install https://github.com/camaleaun/wp-kses-svg/releases/download/0.1.0/wp-kses-svg.0.1.0.zipReadme
WP KSES SVG
Contributors: (this-should-be-a-list-of-wordpress.org-userid's)
Tags: svg, upload, sanitize, security, kses
Requires at least: 6.4
Tested up to: 7.0
Requires PHP: 8.1
Stable tag: 0.1.0
License: GPL-2.0-or-later
License URI: https://www.gnu.org/licenses/gpl-2.0.html
SVG uploads and inline sanitization for WordPress, built on wp_kses() — no external libraries required.
Description
WP KSES SVG brings SVG support to WordPress without sacrificing the security guarantees that the Core team has always demanded. It does not fight the Core philosophy — it speaks its language.
Every objection that has kept SVG out of Core is addressed directly:
"SVGs can execute JavaScript." The sanitizer rejects any file the moment a `
Read the full README on GitHub →
Releases
| Tag | Published | Asset | Downloads |
|---|---|---|---|
| 0.1.0 | Jun 4, 2026 | wp-kses-svg.0.1.0.zip | 6 |