Enable SVG, WebP, and ICO Upload

79 Quality Score

Active Installs

18/30

At 10,000 active installs it has a modest user base, well below the million-install leaders in this category, which caps its real-world track record.

Update Freshness

25/25

It was updated on 2026-05-24 and is tested against WordPress 7.0, so the maintenance signal is excellent and clearly recent.

User Rating

14/15

A 92/100 rating from 10 reviewers is positive, though the small sample size means it is more directional than statistically conclusive.

Support Health

8/15

Zero support threads opened and zero resolved gives a neutral 50, indicating either very few problems or very little engagement from the developer on the forums.

WP Compatibility

15/15

It requires only PHP 7.0 and WordPress 4.7, and is tested with WordPress 7.0, which gives it a clean 100 for broad compatibility.

Scores higher than 73% of indexed plugins

About

This plugin will enable uploading SVG, WebP & ICO image files to WordPress sites.

Active Installs 10k+

Rating ★★★★½ 4.6/5

Last Updated 2026-09-01 9:55pm GMT

Requires WordPress 4.7+

Tested Up To 7.1

Requires PHP 7.0+

Security History

5 known vulnerabilities, all patched

2 High 2 Medium 1 Low

Most recent: November 17, 2025

View details ▸

Enable SVG, WebP, and ICO Upload <= 1.1.3 - Authenticated (Author+) Arbitrary File Upload via ICO Upload Bypass High

November 17, 2025 Patched in ["1.1.4"] CVE-2025-13069

Enable SVG, WebP, and ICO Upload <= 1.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploads Medium

November 17, 2025 Patched in ["1.1.3"] CVE-2025-12457

Enable SVG, WebP & ICO Upload <= 1.1.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Medium

June 23, 2023 Patched in ["1.1.2"] CVE-2023-2143

Enable SVG, WebP & ICO Upload <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting Low

August 1, 2022 Patched in ["1.0.3"] CVE-2022-36343

Enable SVG, WebP & ICO Upload <= 1.1.0 - Arbitrary File Upload High

August 1, 2022 Patched in ["1.1.1"] CVE-2022-34154

What It Does

Enable SVG, WebP, and ICO Upload registers three modern image formats (SVG, WebP, ICO) as allowed upload types in the WordPress media library, so users can drop these files into posts, pages, and the Media Library without hitting the default file-type restriction. It does not sanitize SVGs or perform any image optimization, it simply bypasses the upload filter. Once enabled, files behave like any other upload in terms of URLs, attachment metadata, and embedding.

Who It's For

This plugin is a good fit for site owners who already understand the basics of SVG security and just need a friction-free way to upload logo files, favicons, and WebP images into WordPress without touching functions.php. It works well for small portfolios, branding showcases, and developer sites that control their own asset pipeline. Anyone comfortable accepting SVGs only from trusted sources will get the most value here.

Who Should Skip It

If you allow SVG uploads from clients, contributors, or the public, you should skip this plugin and choose Safe SVG instead, since it sanitizes SVG markup to block embedded scripts and XSS payloads. Likewise, large media-heavy sites should consider EWWW Image Optimizer, which adds WebP/AVIF support and actually optimizes images rather than only letting them in.

The Bottom Line

For a free, lightweight way to accept SVG, WebP, and ICO uploads on a site where you trust the source of every SVG, this plugin does the job and is clearly maintained. Its 79.21 overall score and the absence of SVG sanitization are the two things to weigh against it. If security matters more than simplicity, move up to Safe SVG before installing this one.

Related Plugins

Safe SVG 89/100

Pick Safe SVG when you need SVG uploads plus built-in sanitization to defend against malicious XML and script injection.

SVG Support 89/100

Choose SVG Support if you want SVG rendering inside posts and pages with style controls, not just upload permission.

EWWW Image Optimizer 89/100

Go with EWWW when you need WebP/AVIF conversion plus actual image compression and lazy loading in one tool.

Converter for Media – Optimize images | Convert WebP & AVIF 88/100

Pick this converter if your priority is serving WebP/AVIF automatically to visitors for performance rather than just allowing uploads.

Imsanity 86/100

Choose Imsanity only if your problem is oversized image uploads, since it is focused on resizing rather than format support.