SVG Support

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Modeled within the band wp.org reports; tightens as we track daily.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

Reviewers say SVG Support just works for uploading and styling SVGs, with only one report of a big memory spike that pushed a user back to a manual snippet.

1. ★★★★★ VS4Net Sistemas

   4mo ago

   Thanks!

   Read on wp.org ↗
2. ★★★★★ Randy

   6mo ago

   Needed SVG upload support and this plugin fixed it right away. No complicated setup, just install and done. Works smoothly with the media library. Small plugin but really useful. tnkz dev 👍

   Read on wp.org ↗
3. ★★★★★ Jean Werk

   9mo ago

   It works out of the box and it’s safe

   Read on wp.org ↗
4. ★★★★★ filtrocreativo22

   10mo ago

   The best and simplest

   Read on wp.org ↗
5. ★★★★★ atkulp

   12mo ago

   I wanted to be able to use SVG files for logo and other assets and this plugin made it easy. Thanks!

   Read on wp.org ↗
6. ★★★★★ Nandor

   1.0y ago

   Works well, happy to use. Thank you

   Read on wp.org ↗
7. ★★★★★ viniferraz24

   1.1y ago

   It did what it promised. I will definitely use it again in future projects!

   Read on wp.org ↗
8. ★★★★★ douglockyer64

   1.1y ago

   Makes uploading and applying/styling custom svg icons a breeze. Integrates perfectly with elementor and font awesome.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.6.0 New Features : Completely redesigned settings screen with the new SVG Support brand — cleaner panels, real toggle switches, role picker chips, and a live code sample Settings now auto-save as you change them, with a save 2.6.0
2. — Version 2.5.17 Security Enhancements : Fixed a stored XSS sanitization bypass via the .svgz extension – .svgz uploads are now sanitized just like .svg (decompressing the gzip stream first when present), instead of skipping sanitization 2.5.17
3. — Version 2.5.16 General Updates : Updated the author social link from Warpcast to Farcaster (farcaster.xyz/benbodhi) Removed the source map reference from the bundled DOMPurify library to stop browsers requesting a missing .map file (ha 2.5.16
4. — Version 2.5.15 Security Enhancements : Fixed a broken access control issue in the inline featured image toggle (CVE-2026-48973) – the AJAX action is no longer exposed to logged-out visitors and now checks edit permissions on the specif 2.5.15
5. — Version 2.5.14 Security Enhancements : Remove default roles from the sanitizer bypass settings Fixes : More comprehensive upload checks, allowing generator tags and comment patterns Performance Improvements : Cleanup duplicate inline_f 2.5.14
6. — Version 2.5.13 Code Improvements : Better PHP 8.3 compatibility – added null checks to prevent deprecated warnings in PHP 8.3 2.5.13

8 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 SVG Support <= 2.5.16 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2026-07-24 CVE-2026-13340 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.16 Patched in 2.5.17
2. Medium · 4.3 SVG Support <= 2.5.14 - Missing Authorization ↗
   2026-05-27 CVE-2026-48973 Missing Authorization Affects <= 2.5.14 Patched in 2.5.15
3. Medium · 5.4 SVG Support <= 2.5.8 - Stored Cross-Site Scripting via Vulnerability Dependency ↗
   2025-02-24 CVE-2022-23638 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.8 Patched in 2.5.9
4. Medium · 6.4 SVG Support <= 2.5.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload ↗
   2025-02-21 CVE-2024-10222 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.10 Patched in 2.5.11
5. Medium · 5.4 SVG Support <= 2.5.7 - Authenticated (Author+) Cross-Site Scripting via SVG ↗
   2024-07-17 CVE-2023-6708 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.5.7 Patched in 2.5.8
6. Medium · 6.4 SVG Support 2.5 - 2.5.1 - Insecure Plugin Defaults to Cross-Site Scripting ↗
   2022-11-16 CVE-2022-4022 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 2.5 - 2.5.1 Patched in 2.5.2
7. Medium · 6.4 SVG Support <= 2.4.2 - Authenticated (Author+) Stored Cross-Site Scripting ↗
   2022-09-05 CVE-2022-1755 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.4.2 Patched in 2.5
8. Medium · 5.5 SVG Support <= 2.3.19 Admin+ Cross-Site Scripting ↗
   2022-01-03 CVE-2021-24686 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.3.19 Patched in 2.3.20

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 30 languages, 7 at 90% or more

Plus 6 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

No tier crossings observed yet.

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Safe SVG 1M+ installs · 4.7★ · 2 shared tags A
• WP SVG Images 30K+ installs · 4.5★ · 2 shared tags A
• OH MY SVG 200+ installs · 3.6★ · 2 shared tags B
• SVG Editor: Upload & Change Colors 100+ installs · 4.1★ · 2 shared tags A
• Support SVG – Upload svg files in wordpress without hassle 20+ installs · 3.6★ · 2 shared tags B
• Compatibility Fix for Safe SVG 10+ installs · 3.6★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for SVG Support into a readme, a review or a deck. It updates itself.

SVG Support: 1M+ active installs, 4.8★ (355 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/svg-support