WP Manifestindependent plugin directory
manifest / security / svg-safe-uploader

SVG Safe Uploader WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

Lightweight, secure SVG uploader for WP. Sanitizes files without external libs and fixes media previews. / 外部ライブラリ不要、安全にSVGをアップロード。独自のサニタイズ処理に加え、標準では壊れがちなメディア一覧のプレビューも修正。

★ 0stars
v1.0.1latest · 5mo ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/ms13th-cyber/svg-safe-uploader/archive/refs/heads/main.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

A lightweight, high-security SVG upload enabler for WordPress. It sanitizes SVG files using PHP's DOMDocument to prevent XSS and XXE attacks, while ensuring stable media library previews via native WordPress hooks.

[日本語の解説は英語の後にあります]


Key Features

  • Security First: Automatically sanitizes SVG files upon upload. It removes malicious tags like `

Releases

2 releases.

Tag
Published
v1.0.1 latest
May 21, 2026 5mo ago
Apr 24, 2026 6mo ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A grade

Security

SVG Safe Uploader 1.0.1 · audited by WP Registry

No security issues found.

Audited release
1.0.1
Findings
none
Worst severity
—
Content hash
b656a44b6b707d1c2020ee98…

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.