A vulnerability identified as problematic has been detected in URL Image Importer Plugin up to 1.0.7 on WordPress. This impacts an unknown function of the component SVG File Upload Handler. Performing a manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2025-14120. It is possible to initiate the attack remotely. There is no exploit available.