SVG Support
Healthy: maintained, last release 31 Oct 2026, 13 releases in 24 months, no unpatched vulnerabilities.
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 80 |
| Support | 70 |
| Reputation | 70 |
Quick answers
- Is SVG Support still maintained?
- Yes. Last release 31 Oct 2026, 13 releases in the last 24 months. 31 Oct 2026 · wordpress.org
- Who owns SVG Support, and has it changed hands?
- No change recorded. Main committer Benbodhi since Jul 2014. 4 Nov 2026 · SVN log
- Was SVG Support removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is SVG Support safe?
- 8 known vulnerabilities, all fixed (latest in 2.5.17). Not on the exploited list. 24 Jul 2026 · Wordfence Intelligence
- Is the latest SVG Support update safe to install?
- No ownership change before 2.6.3. No one-star spike after it. 31 Oct 2026 · Release history
Active signals
Facts we detected, with links to the source.
No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| Benbodhi | 22 Jul 2014 to 31 Oct 2026, 224 commits |
|---|
1 committer recorded. No ownership change since 2014.
Maintenance
- Last release
- 4 days ago
- Releases, 24 months
- 13
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 3 |
| Q4 2024 | 0 |
| Q1 2025 | 6 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 2 |
| Q3 2026 | 3 |
| Q4 2026 | 2 |
Last release 31 Oct 2026. Tested with WordPress 7.1 (current).
Reputation
Last 90 days: 3.0 (1 review). Lifetime: 4.8.
| Q1 2024 | 5.0 |
|---|---|
| Q2 2024 | 4.6 |
| Q3 2024 | 2.3 |
| Q4 2024 | 5.0 |
| Q1 2025 | 3.0 |
| Q2 2025 | 4.5 |
| Q3 2025 | 5.0 |
| Q4 2025 | 5.0 |
| Q1 2026 | 5.0 |
| Q2 2026 | 5.0 |
| Q3 2026 | 3.0 |
Average rating fell from 5.0 to 3.0 between Q1 2024 and Q3 2026.
| 5 star | 331 |
|---|---|
| 4 star | 2 |
| 3 star | 7 |
| 2 star | 5 |
| 1 star | 11 |
- File is not a valid SVG. · 1 star · 23 Feb 2025
- Version 2.5.7 broke 2 websites (that we know of) · 1 star · 5 Aug 2024
- Test updates before releasing · 1 star · 2 Aug 2024
Security record
4 vulnerabilities in 24 months (8 on record), all patched (latest fixed in 2.5.17).
Show 8 patched vulnerabilities
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 24 Jul 2026 | SVG Support <= 2.5.16 - Authenticated (Author+) Stored Cross-Site Scripting | 6.4 | <= 2.5.16 | 2.5.17 | Patched before disclosure |
| 27 May 2026 | SVG Support <= 2.5.14 - Missing Authorization | 4.3 | <= 2.5.14 | 2.5.15 | 3 |
| 24 Feb 2025 | SVG Support <= 2.5.8 - Stored Cross-Site Scripting via Vulnerability Dependency | 5.4 | <= 2.5.8 | 2.5.9 | Patched before disclosure |
| 21 Feb 2025 | SVG Support <= 2.5.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload | 6.4 | <= 2.5.10 | 2.5.11 | Patched before disclosure |
| 17 Jul 2024 | SVG Support <= 2.5.7 - Authenticated (Author+) Cross-Site Scripting via SVG | 5.4 | <= 2.5.7 | 2.5.8 | 26 |
| 16 Nov 2022 | SVG Support 2.5 - 2.5.1 - Insecure Plugin Defaults to Cross-Site Scripting | 6.4 | 2.5 to 2.5.1 | 2.5.2 | Patched before disclosure |
| 5 Sep 2022 | SVG Support <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting | 6.4 | <= 2.4.2 | 2.5 | Patched before disclosure |
| 3 Jan 2022 | SVG Support <= 2.3.19 Admin+ Cross-Site Scripting | 5.5 | <= 2.3.19 | 2.3.20 | Patched before disclosure |
Changelog mentions of security fixes: 2.5.15 (security, XSS, sanitize); 2.5.17 (security, XSS, sanitize); 2.6.1 (security, sanitize); 2.6.2 (security, XSS, sanitize); 2.6.3 (security, sanitize).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Support
100% of 2 support threads resolved in the last 2 months.
Momentum
1,000,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 7,408 |
|---|---|
| 11 May 2026 | 15,435 |
| 18 May 2026 | 15,338 |
| 25 May 2026 | 311,875 |
| 1 Jun 2026 | 147,697 |
| 8 Jun 2026 | 72,385 |
| 15 Jun 2026 | 54,879 |
| 22 Jun 2026 | 47,388 |
| 29 Jun 2026 | 42,470 |
| 6 Jul 2026 | 79,699 |
| 13 Jul 2026 | 382,606 |
| 20 Jul 2026 | 625,494 |
| 27 Jul 2026 | 158,621 |
| 3 Aug 2026 | 118,988 |
| 10 Aug 2026 | 52,747 |
| 17 Aug 2026 | 53,682 |
| 24 Aug 2026 | 47,227 |
| 31 Aug 2026 | 39,238 |
| 7 Sep 2026 | 33,437 |
| 14 Sep 2026 | 32,701 |
| 21 Sep 2026 | 32,914 |
| 28 Sep 2026 | 29,842 |
| 5 Oct 2026 | 29,462 |
| 12 Oct 2026 | 26,819 |
| 19 Oct 2026 | 41,765 |
| 26 Oct 2026 | 309,796 |
| 2 Nov 2026 | 40,359 |
Weekly downloads over the last 4 weeks are 1% below the 27-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.
Facts
| Version | 2.6.3 |
|---|---|
| Author | Benbodhi |
| Added | 22 Jul 2014 |
| Last updated | 31 Oct 2026 |
| Active installs | 1,000,000+ |
| Requires WordPress | 5.8 |
| Tested up to | 7.1.4 |
| Requires PHP | 7.4 |
| Category | Design & Themes |
| Tags | SVG, Vector, safe svg, mime type, sanitization |
Other plugins by this author: Admin Toolbar Menus
Questions
Is SVG Support still maintained?
Yes. Last release 31 Oct 2026, 13 releases in the last 24 months.
Who owns SVG Support, and has it changed hands?
No change recorded. Main committer Benbodhi since Jul 2014.
Was SVG Support removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is SVG Support safe?
8 known vulnerabilities, all fixed (latest in 2.5.17). Not on the exploited list.
Is the latest SVG Support update safe to install?
No ownership change before 2.6.3. No one-star spike after it.