A vulnerability, which was classified as problematic, has been found in Easy SVG Support Plugin up to 4.0 on WordPress. Impacted is an unknown function of the component SVG File Handler. The manipulation leads to cross site scripting.
This vulnerability is documented as CVE-2025-12451. The attack can be initiated remotely. There is not any exploit available.