The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or… (CVE-2026-85573)
The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or verify the authenticity of its public upload requests, allowing unauthenticated users to store files containing active content which run in the site's origin when a victim opens them.
AI Analysis
Technical Summary
The All in One Files Upload WordPress plugin before version 2.0.17 introduces SVG file upload capability but fails to sanitize these files or verify upload request authenticity. This results in a CWE-79 Cross-Site Scripting vulnerability whereby unauthenticated attackers can store malicious active content in uploaded SVG files. When a victim opens such a file within the site context, the malicious content executes, potentially leading to client-side script execution.
Potential Impact
Unauthenticated attackers can upload malicious SVG files containing active content that executes in the context of the vulnerable website when accessed by users. This can lead to client-side script execution, which may result in session hijacking, defacement, or other client-side attacks depending on the payload. The vulnerability affects versions >=2.0.3 and <2.0.17 of the plugin.
Mitigation Recommendations
A fixed version of the plugin is available starting from version 2.0.17. Users should upgrade to version 2.0.17 or later to remediate this vulnerability. No other mitigation steps are indicated by the vendor advisory.
The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or… (CVE-2026-85573)
Description
The All in One Files Upload WordPress plugin before 2.0.17 adds SVG to the site's allowed upload types and does not sanitise uploaded files or verify the authenticity of its public upload requests, allowing unauthenticated users to store files containing active content which run in the site's origin when a victim opens them.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The All in One Files Upload WordPress plugin before version 2.0.17 introduces SVG file upload capability but fails to sanitize these files or verify upload request authenticity. This results in a CWE-79 Cross-Site Scripting vulnerability whereby unauthenticated attackers can store malicious active content in uploaded SVG files. When a victim opens such a file within the site context, the malicious content executes, potentially leading to client-side script execution.
Potential Impact
Unauthenticated attackers can upload malicious SVG files containing active content that executes in the context of the vulnerable website when accessed by users. This can lead to client-side script execution, which may result in session hijacking, defacement, or other client-side attacks depending on the payload. The vulnerability affects versions >=2.0.3 and <2.0.17 of the plugin.
Mitigation Recommendations
A fixed version of the plugin is available starting from version 2.0.17. Users should upgrade to version 2.0.17 or later to remediate this vulnerability. No other mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-c54q-hhx6-vc6r
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-85573"]
- State
- PUBLISHED
Threat ID: 6abcddd50df196e1a9da6eea
Added to database: 09/30/2026, 10:00:53 UTC
Last enriched: 09/30/2026, 06:39:31 UTC
Last updated: 09/30/2026, 13:49:29 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.