A vulnerability, which was classified as critical, has been found in Enable SVG, WebP, and ICO Upload Plugin up to 1.1.2 on WordPress. This vulnerability affects unknown code of the component ICO File Handler. The manipulation leads to unrestricted upload.
This vulnerability is listed as CVE-2025-13069. The attack may be initiated remotely. There is no available exploit.