CVE-2025-12846 | Blocksy Companion Plugin up to 2.1.19 on WordPress SVG File Parser unrestricted upload

A vulnerability categorized as critical has been discovered in Blocksy Companion Plugin up to 2.1.19 on WordPress. The impacted element is an unknown function of the component SVG File Parser. Executing manipulation can lead to unrestricted upload.

This vulnerability is tracked as CVE-2025-12846. The attack can be launched remotely. No exploit exists.