Skip to content
PluginCanary

Enable SVG, WebP, and ICO Upload

by ideasToCode · 10,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 25 Oct 2026, 10 releases in 24 months, no unpatched vulnerabilities.

90/ 100 Canary Score
Sub-scores for Enable SVG, WebP, and ICO Upload
Ownership100
Maintenance100
Security75
SupportNo data
Reputation85

How the score works

Quick answers

Is Enable SVG, WebP, and ICO Upload still maintained?
Yes. Last release 25 Oct 2026, 10 releases in the last 24 months. 25 Oct 2026 · wordpress.org
Who owns Enable SVG, WebP, and ICO Upload, and has it changed hands?
No change recorded. Main committer ideastocode since Apr 2021. 4 Nov 2026 · SVN log
Was Enable SVG, WebP, and ICO Upload removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Enable SVG, WebP, and ICO Upload safe?
7 known vulnerabilities, all fixed (latest in 1.1.6). Not on the exploited list. 27 Oct 2026 · Wordfence Intelligence
Is the latest Enable SVG, WebP, and ICO Upload update safe to install?
No ownership change before 1.1.6. No one-star spike after it. 25 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master6 Apr 2021 to 6 Apr 2021, 1 commits
ideastocode7 Apr 2021 to 25 Oct 2026, 52 commits

2 committers recorded. No ownership change since 2021.

Maintenance

Last release
10 days ago
Releases, 24 months
10
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for Enable SVG, WebP, and ICO Upload
Q1 20240
Q2 20240
Q3 20243
Q4 20246
Q1 20250
Q2 20250
Q3 20250
Q4 20252
Q1 20260
Q2 20260
Q3 20261
Q4 20261

Last release 25 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 5.0 (1 review). Lifetime: 4.6.

Average rating per quarter for Enable SVG, WebP, and ICO Upload
Q3 20245.0
Q4 20245.0
Q3 20265.0

Average rating stayed at 5.0 between Q3 2024 and Q3 2026.

Rating distribution
5 star10
4 star0
3 star0
2 star0
1 star1
Latest low reviews

Security record

4 vulnerabilities in 24 months (7 on record), all patched (latest fixed in 1.1.6).

Show 7 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
27 Oct 2026Enable SVG, WebP, and ICO Upload 1.1.3 - 1.1.5 - Authenticated (Author+) Stored Cross-Site Scripting6.41.1.3 to 1.1.51.1.6Patched before disclosure
27 Oct 2026Enable SVG, WebP, and ICO Upload <= 1.1.5 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 1.1.51.1.6Patched before disclosure
17 Nov 2025Enable SVG, WebP, and ICO Upload <= 1.1.3 - Authenticated (Author+) Arbitrary File Upload via ICO Upload Bypass8.8<= 1.1.31.1.417
17 Nov 2025Enable SVG, WebP, and ICO Upload <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploads6.4<= 1.1.21.1.3Patched before disclosure
23 Jun 2023Enable SVG, WebP & ICO Upload <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG5.4<= 1.1.11.1.2516
1 Aug 2022Enable SVG, WebP & ICO Upload <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting3.8<= 1.0.21.0.374
1 Aug 2022Enable SVG, WebP & ICO Upload <= 1.1.0 - Arbitrary File Upload7.2<= 1.1.01.1.1842

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Enable SVG, WebP, and ICO Upload
4 May 202696
11 May 2026292
18 May 2026291
25 May 2026294
1 Jun 2026315
8 Jun 2026276
15 Jun 2026261
22 Jun 2026234
29 Jun 2026225
6 Jul 2026274
13 Jul 2026226
20 Jul 2026235
27 Jul 2026282
3 Aug 2026310
10 Aug 2026286
17 Aug 2026290
24 Aug 2026234
31 Aug 20263,581
7 Sep 2026899
14 Sep 20261,044
21 Sep 2026776
28 Sep 2026660
5 Oct 2026544
12 Oct 2026465
19 Oct 2026743
26 Oct 20264,666
2 Nov 2026199

Weekly downloads over the last 4 weeks are 128% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

reGenerate Thumbnails AdvancedScore 100 · 60,000+File Upload Types by WPFormsScore 100 · 40,000+WP SVG ImagesScore 100 · 30,000+Media Library CategoriesScore 100 · 20,000+No Right Click ImagesScore 100 · 20,000+

Facts

Version1.1.6
AuthorideasToCode
Added7 Apr 2021
Last updated25 Oct 2026
Active installs10,000+
Requires WordPress4.7
Tested up to7.1.4
Requires PHP7.0
CategoryPerformance & Optimization > Image Optimization & Compression
Tagsico, SVG, webp, image, Serve images

Other plugins by this author: Disable Auto Update Emails and Block Updates for Plugins, WP Core, and Themes, Duplicate Page or Post, Delete Revisions and Enable Classic Editor, Improve Website Security, Custom Search Box, Secure Login Authorization

Questions

Is Enable SVG, WebP, and ICO Upload still maintained?

Yes. Last release 25 Oct 2026, 10 releases in the last 24 months.

Who owns Enable SVG, WebP, and ICO Upload, and has it changed hands?

No change recorded. Main committer ideastocode since Apr 2021.

Was Enable SVG, WebP, and ICO Upload removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Enable SVG, WebP, and ICO Upload safe?

7 known vulnerabilities, all fixed (latest in 1.1.6). Not on the exploited list.

Is the latest Enable SVG, WebP, and ICO Upload update safe to install?

No ownership change before 1.1.6. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue