Skip to content
PluginCanary

SVG Support

by Benbodhi · 1,000,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 31 Oct 2026, 13 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for SVG Support
Ownership100
Maintenance100
Security80
Support70
Reputation70

How the score works

Quick answers

Is SVG Support still maintained?
Yes. Last release 31 Oct 2026, 13 releases in the last 24 months. 31 Oct 2026 · wordpress.org
Who owns SVG Support, and has it changed hands?
No change recorded. Main committer Benbodhi since Jul 2014. 4 Nov 2026 · SVN log
Was SVG Support removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is SVG Support safe?
8 known vulnerabilities, all fixed (latest in 2.5.17). Not on the exploited list. 24 Jul 2026 · Wordfence Intelligence
Is the latest SVG Support update safe to install?
No ownership change before 2.6.3. No one-star spike after it. 31 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
Benbodhi22 Jul 2014 to 31 Oct 2026, 224 commits

1 committer recorded. No ownership change since 2014.

Maintenance

Last release
4 days ago
Releases, 24 months
13
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter
Releases per quarter for SVG Support
Q1 20240
Q2 20240
Q3 20243
Q4 20240
Q1 20256
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20262
Q3 20263
Q4 20262

Last release 31 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 3.0 (1 review). Lifetime: 4.8.

Average rating per quarter for SVG Support
Q1 20245.0
Q2 20244.6
Q3 20242.3
Q4 20245.0
Q1 20253.0
Q2 20254.5
Q3 20255.0
Q4 20255.0
Q1 20265.0
Q2 20265.0
Q3 20263.0

Average rating fell from 5.0 to 3.0 between Q1 2024 and Q3 2026.

Rating distribution
5 star331
4 star2
3 star7
2 star5
1 star11
Latest low reviews

Security record

4 vulnerabilities in 24 months (8 on record), all patched (latest fixed in 2.5.17).

Show 8 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
24 Jul 2026SVG Support <= 2.5.16 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 2.5.162.5.17Patched before disclosure
27 May 2026SVG Support <= 2.5.14 - Missing Authorization4.3<= 2.5.142.5.153
24 Feb 2025SVG Support <= 2.5.8 - Stored Cross-Site Scripting via Vulnerability Dependency5.4<= 2.5.82.5.9Patched before disclosure
21 Feb 2025SVG Support <= 2.5.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4<= 2.5.102.5.11Patched before disclosure
17 Jul 2024SVG Support <= 2.5.7 - Authenticated (Author+) Cross-Site Scripting via SVG5.4<= 2.5.72.5.826
16 Nov 2022SVG Support 2.5 - 2.5.1 - Insecure Plugin Defaults to Cross-Site Scripting6.42.5 to 2.5.12.5.2Patched before disclosure
5 Sep 2022SVG Support <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 2.4.22.5Patched before disclosure
3 Jan 2022SVG Support <= 2.3.19 Admin+ Cross-Site Scripting5.5<= 2.3.192.3.20Patched before disclosure

Changelog mentions of security fixes: 2.5.15 (security, XSS, sanitize); 2.5.17 (security, XSS, sanitize); 2.6.1 (security, sanitize); 2.6.2 (security, XSS, sanitize); 2.6.3 (security, sanitize).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 2 support threads resolved in the last 2 months.

Momentum

1,000,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for SVG Support
4 May 20267,408
11 May 202615,435
18 May 202615,338
25 May 2026311,875
1 Jun 2026147,697
8 Jun 202672,385
15 Jun 202654,879
22 Jun 202647,388
29 Jun 202642,470
6 Jul 202679,699
13 Jul 2026382,606
20 Jul 2026625,494
27 Jul 2026158,621
3 Aug 2026118,988
10 Aug 202652,747
17 Aug 202653,682
24 Aug 202647,227
31 Aug 202639,238
7 Sep 202633,437
14 Sep 202632,701
21 Sep 202632,914
28 Sep 202629,842
5 Oct 202629,462
12 Oct 202626,819
19 Oct 202641,765
26 Oct 2026309,796
2 Nov 202640,359

Weekly downloads over the last 4 weeks are 1% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

File Upload Types by WPFormsScore 100 · 40,000+Disable "BIG Image" ThresholdScore 100 · 10,000+Image HubScore 98 · 10,000+Easy SVG SupportScore 96 · 40,000+FoldersScore 95 · 90,000+

Facts

Version2.6.3
AuthorBenbodhi
Added22 Jul 2014
Last updated31 Oct 2026
Active installs1,000,000+
Requires WordPress5.8
Tested up to7.1.4
Requires PHP7.4
CategoryDesign & Themes
TagsSVG, Vector, safe svg, mime type, sanitization

Other plugins by this author: Admin Toolbar Menus

Questions

Is SVG Support still maintained?

Yes. Last release 31 Oct 2026, 13 releases in the last 24 months.

Who owns SVG Support, and has it changed hands?

No change recorded. Main committer Benbodhi since Jul 2014.

Was SVG Support removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is SVG Support safe?

8 known vulnerabilities, all fixed (latest in 2.5.17). Not on the exploited list.

Is the latest SVG Support update safe to install?

No ownership change before 2.6.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue