Enable SVG, WebP, and ICO Upload

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 79% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ santoshsth1

   1.7y ago

   Works great!!

   Read on wp.org ↗
2. ★★★★★ ideasToCode

   1.8y ago

   Dear All, Here are the brief updates we’ve made to our plugins: We have resolved all the security issues raised for the plugins, and they now eliminate all vulnerabilities. We have removed the notices that appeared during plugin installation—everything has been resolved. We have moved the plugin under “Settings,” removing unnecessary additions to the WordPress admin sidebar. We will continue to make frequent updates to address any issues in the future.Thank you for your support 🙂

   Read on wp.org ↗
3. ★★★★★ Alain Sanchez

   2.0y ago

   The Enable SVG, WebP & ICO Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in versions up to 1.0.4. This makes it possible for authenticated attackers to upload arbitrary files on the affected site’s server which may make a potential remote code execution. More information on the threat intel on the Wordfence website.

   Read on wp.org ↗
4. ★★★★★ dgpalych

   3.0y ago

   Перевод на русский язык отсутствует. Так что – автор лукавит.

   Read on wp.org ↗
5. ★★★★★ cf0975140388

   3.2y ago

   The plugin is great, compact and easy to set up.

   Read on wp.org ↗
6. ★★★★★ samuelkrempasky

   4.3y ago

   The plugin does what it should. But as long as why it needs to take up space in the admin panel. Until this item will be moved to the Settings submenu, I will unfortunately leave a bad review here because I find it unnecessary to have it in admin menu.

   Read on wp.org ↗
7. ★★★★★ zdangbichvan

   4.5y ago

   I tried so many different plugins, but only this plugin can help me!

   Read on wp.org ↗
8. ★★★★★ nonamehere

   5.1y ago

   I cannot believe it has so few reviews! This is the PERFECT plugin to use WEBP images! Thanks to the team who developed it!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.1.4 Security fixes 1.1.4
2. — Version 1.1.3 Security fixes 1.1.3
3. — Version 1.1.2 Cleans malicious code from SVG files upon upload 1.1.2
4. — Version 1.1.1 All Security fixes and removed unnecessary codes 1.1.1
5. — Version 1.1.0 Minor fixes 1.1.0
6. — Version 1.0.9 Minor Security fixes 1.0.9

5 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 8.8 Enable SVG, WebP, and ICO Upload <= 1.1.3 - Authenticated (Author+) Arbitrary File Upload via ICO Upload Bypass ↗
   2025-11-17 CVE-2025-13069 Unrestricted Upload of File with Dangerous Type Affects <= 1.1.3 Patched in 1.1.4
2. Medium · 6.4 Enable SVG, WebP, and ICO Upload <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploads ↗
   2025-11-17 CVE-2025-12457 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.1.2 Patched in 1.1.3
3. Medium · 5.4 Enable SVG, WebP & ICO Upload <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG ↗
   2023-06-23 CVE-2023-2143 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.1.1 Patched in 1.1.2
4. Low · 3.8 Enable SVG, WebP & ICO Upload <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2022-08-01 CVE-2022-36343 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.0.2 Patched in 1.0.3
5. High · 7.2 Enable SVG, WebP & ICO Upload <= 1.1.0 - Arbitrary File Upload ↗
   2022-08-01 CVE-2022-34154 Unrestricted Upload of File with Dangerous Type Affects <= 1.1.0 Patched in 1.1.1

Automated install-time checks, tested on PHP 8.1.12 · WP 6.9

Translated into 2 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-05-11 9K+ → 10K+ up after 98 days in tier
2. 2024-02-03 8K+ → 9K+ up after 110 days in tier
3. 2023-10-16 7K+ → 8K+ up after 102 days in tier
4. 2023-07-06 6K+ → 7K+ up after 81 days in tier
5. 2023-04-16 5K+ → 6K+ up after 90 days in tier
6. 2023-01-16 4K+ → 5K+ up after 1 days in tier
7. 2023-01-15 5K+ → 4K+ down after 1 days in tier
8. 2023-01-14 4K+ → 5K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• WebP Conversion 3K+ installs · 4.0★ · 4 shared tags B
• Cimo – Free Instant Image Optimizer & WebP Converter 10K+ installs · 4.5★ · 2 shared tags A
• Support WebP – Upload webp files in wordpress without hassle 4K+ installs · 4.2★ · 2 shared tags B
• SVG Block 4K+ installs · 4.5★ · 2 shared tags A
• Image Converter for WebP 1K+ installs · 4.2★ · 2 shared tags A
• Image Quality Control | Still BE 400+ installs · 4.2★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Enable SVG, WebP, and ICO Upload into a readme, a review or a deck. It updates itself.

Enable SVG, WebP, and ICO Upload: 10K+ active installs, 4.6★ (11 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/enable-svg-webp-ico-upload