Wordfence & SVGs

Hi @jakeward, thanks for messaging us with your question.

Wordfence’s firewall rules don’t currently have a way of sanitizing or detecting unsafe SVG uploads. As a sidenote, it would be unsafe for any plugin that offers SVG uploads to do so in an unsanitized manner for lower level or untrusted users, which is why many plugins don’t allow them at all. If you do opt to enable them, ensure only a trusted user level and/or the contents of the upload are being checked and sanitized.

Thanks,

Peter.