CVE-2026-5626Survey Form Block <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission Data Export Exploitation status Not known exploited Fix Affected product S Survey Form Block – collect answers and insights from your audience Published 07/29/2026 Severity Medium CVE-2026-27422WordPress YT Player plugin <= 2.0.9 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product Y YT Player Published 07/23/2026 Severity Medium CVE-2026-57647WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix Affected product P Panorama Viewer – 360 Degree Image + Video Viewer Published 06/26/2026 Severity High CVE-2026-57323WordPress Flash & HTML5 Video plugin <= 2.11.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product F Flash & HTML5 Video Published 06/26/2026 Severity Medium CVE-2026-56063WordPress MailChimp Block plugin <= 1.1.15 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product M MailChimp Block Published 06/26/2026 Severity High CVE-2026-11402Services Section Block <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Block Attribute Exploitation status Not known exploited Fix Affected product S Services Section Block – Showcase Service Details in Grid or Columns Published 06/18/2026 Severity Medium CVE-2026-39579WordPress B Blocks plugin <= 2.0.31 - Privilege Escalation vulnerability Exploitation status Not known exploited Fix Affected product B B Blocks Published 06/15/2026 Severity High CVE-2026-53736Easy Twitter Feeds before 1.2.13 Cross-Site Request Forgery via duplicate_post Action Exploitation status Not known exploited Fix Affected product E Easy Twitter Feeds Published 06/10/2026 Severity Medium CVE-2026-24520WordPress Tiktok Feed plugin <= 1.0.24 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product T Tiktok Feed Published 05/26/2026 Severity Medium CVE-2026-27416WordPress PDF Poster plugin <= 2.4.1 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P PDF Poster Published 05/07/2026 Severity Medium CVE-2026-6446My Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX Action Exploitation status Not known exploited Fix Affected product M My Social Feeds – Social Feeds Embedder Plugin for WordPress Published 05/02/2026 Severity Medium CVE-2024-13362Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter Exploitation status Not known exploited Fix Affected product A Advanced Scrollbar – Custom Scrollbar Styling and Behavior Published 05/01/2026 Severity Medium CVE-2026-40729WordPress 3D viewer – Embed 3D Models plugin <= 1.8.5 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product 3 3D viewer – Embed 3D Models Published 04/15/2026 Severity Medium CVE-2026-32489WordPress B Blocks plugin < 2.0.30 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product B B Blocks Published 03/25/2026 Severity Medium CVE-2026-4120Info Cards <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes Exploitation status Not known exploited Fix Affected product I Info Cards – Add Text and Media in Card Layouts Published 03/19/2026 Severity Medium CVE-2026-32416WordPress PDF Poster plugin <= 2.4.0 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product P PDF Poster Published 03/13/2026 Severity Medium CVE-2026-32359WordPress Icon List Block plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product I Icon List Block Published 03/13/2026 Severity Medium CVE-2026-1228Timeline Block <= 1.3.3 - Insecure Direct Object Reference to Authenticated (Author+) Private Timeline Exposure via Shortcode Attribute Exploitation status Not known exploited Fix Affected product T Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines) Published 02/06/2026 Severity Medium CVE-2026-1294All In One Image Viewer Block <= 1.0.2 - Unauthenticated Server-Side Request Forgery via image-proxy Endpoint Exploitation status Not known exploited Fix Affected product A All In One Image Viewer Block – Gutenberg block to create image viewer with hyperlink Published 02/05/2026 Severity High CVE-2026-1389Document Embedder <= 2.0.4 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry Deletion Exploitation status Not known exploited Fix Affected product D Document Embedder – Embed PDFs, Word, Excel, and Other Files Published 01/28/2026 Severity Medium CVE-2026-24565WordPress B Accordion plugin <= 2.0.2 - Sensitive Data Exposure vulnerability Exploitation status Not known exploited Fix Affected product B B Accordion Published 01/23/2026 Severity Medium CVE-2026-24383WordPress B Slider plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product B B Slider Published 01/22/2026 Severity Medium CVE-2026-0833Team Section Block <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Network Link Exploitation status Not known exploited Fix Affected product T Team Section Block – Showcase Team Members with Layout Options Published 01/17/2026 Severity Medium CVE-2025-13999HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request Forgery Exploitation status Not known exploited Fix Affected product H HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player Published 12/19/2025 Severity High CVE-2025-60079WordPress Parallax Section block plugin <= 1.0.9 - Broken Authentication vulnerability Exploitation status Not known exploited Fix Affected product P Parallax Section block Published 12/18/2025 Severity High CVE-2025-66110WordPress Tiktok Feed plugin <= 1.0.23 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product T Tiktok Feed Published 11/21/2025 Severity Medium CVE-2025-12376Icon List Block – Add Icon-Based Lists with Custom Styles <= 1.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery Exploitation status Not known exploited Fix Affected product I Icon List Block – Add Icon-Based Lists with Custom Styles Published 11/18/2025 Severity Medium CVE-2025-54711WordPress Info Cards Plugin <= 1.0.11 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product I Info Cards Published 11/06/2025 Severity High CVE-2025-49900WordPress Advanced scrollbar plugin <= 1.1.8 - Privilege Escalation vulnerability Exploitation status Not known exploited Fix Affected product A Advanced scrollbar Published 11/06/2025 Severity High CVE-2025-49394WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 1.0.7 - Broken Authentication vulnerability Exploitation status Not known exploited Fix Affected product I Image Gallery block – Create and display photo gallery/photo album. Published 11/06/2025 Severity High CVE-2025-12384Document Embedder – Embed PDFs, Word, Excel, and Other Files <= 2.0.0 - Missing Authorization to Unauthenticated Document Manipulation Exploitation status Not known exploited Fix Affected product D Document Embedder – Embed PDFs, Word, Excel, and Other Files Published 11/05/2025 Severity High CVE-2025-12388B Carousel Block – Responsive Image and Content Carousel <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery Exploitation status Not known exploited Fix Affected product C Carousel Block – Responsive Image and Content Carousel Published 11/05/2025 Severity Medium CVE-2025-62007WordPress Voice Feedback plugin <= 1.0.3 - Privilege Escalation vulnerability Exploitation status Not known exploited Fix Affected product V Voice Feedback Published 10/22/2025 Severity High CVE-2025-10735Block For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request Forgery Exploitation status Not known exploited Fix Affected product B Block for Mailchimp – Add Email Subscription Forms and Collect Leads Published 10/01/2025 Severity Medium CVE-2025-9203Media Player Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget Fields Exploitation status Not known exploited Fix Affected product M Media Player Addons for Elementor – Audio and Video Widgets for Elementor Published 09/17/2025 Severity Medium CVE-2025-54734WordPress B Slider Plugin <= 1.1.30 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product B B Slider Published 08/28/2025 Severity Medium CVE-2025-54710WordPress Tiktok Feed Plugin <= 1.0.21 - Broken Access Control Vulnerability Exploitation status Not known exploited Fix Affected product T Tiktok Feed Published 08/28/2025 Severity High CVE-2025-8676B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Sensitive Information Exposure Exploitation status Not known exploited Fix Affected product B bSlider – Create Responsive Image, Post, Product, and Video Sliders Published 08/15/2025 Severity Medium CVE-2025-8680B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery Exploitation status Not known exploited Fix Affected product B bSlider – Create Responsive Image, Post, Product, and Video Sliders Published 08/15/2025 Severity Medium CVE-2025-54708WordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product B B Blocks Published 08/14/2025 Severity Medium CVE-2025-54694WordPress Button Block Plugin plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) Vulnerability Exploitation status Not known exploited Fix Affected product B Button Block Published 08/14/2025 Severity Medium CVE-2025-8418B Slider- Gutenberg Slider Block for WP <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation Exploitation status Not known exploited Fix Affected product B bSlider – Create Responsive Image, Post, Product, and Video Sliders Published 08/12/2025 Severity High CVE-2025-8059B Blocks <= 2.0.6 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr_registration Function Exploitation status Not known exploited Fix Affected product B bBlocks – Essential Gutenberg Blocks & Patterns Collection Published 08/12/2025 Severity Critical CVE-2025-54051WordPress LightBox Block plugin <= 1.1.30 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product L LightBox Block Published 07/16/2025 Severity Medium CVE-2025-27326WordPress Video Gallery Block plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product V Video Gallery Block Published 07/04/2025 Severity Medium CVE-2025-2579Lottie Player <= 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload Exploitation status Not known exploited Fix Affected product L Lottie Player – Add Interactive Lottie Animations with Block Support Published 04/24/2025 Severity Medium CVE-2025-39524WordPress Html5 Audio Player plugin <= 2.2.28 - Cross Site Scripting (XSS) Vulnerability Exploitation status Not known exploited Fix Affected product H Html5 Audio Player Published 04/16/2025 Severity Medium CVE-2025-32173WordPress B Blocks plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product B B Blocks Published 04/04/2025 Severity Medium CVE-2024-13731Alert Box Block – Display notice/alerts in the front end <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Alert Box Block Exploitation status Not known exploited Fix Affected product A Alert Box Block – Display Custom Alerts and Messages Published 03/25/2025 Severity Medium CVE-2025-26952WordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product B Business Card Block Published 02/25/2025 Severity Medium CVE-2025-26949WordPress Team Section Block plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product T Team Section Block Published 02/25/2025 Severity Medium CVE-2025-26947WordPress Services Section block plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product S Services Section block Published 02/25/2025 Severity Medium CVE-2025-26945WordPress Info Cards plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product I Info Cards Published 02/25/2025 Severity Medium CVE-2025-26939WordPress Counters Block plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product C Counters Block Published 02/25/2025 Severity Medium CVE-2025-26938WordPress Countdown Timer block plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product C Countdown Timer Published 02/25/2025 Severity Medium CVE-2025-26937WordPress Icon List Block plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product I Icon List Block Published 02/25/2025 Severity Medium CVE-2025-26881WordPress Sticky Content plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product S Sticky Content Published 02/25/2025 Severity Medium CVE-2025-26883WordPress Animated Text Block plugin <= 1.0.7 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product A Animated Text Block Published 02/24/2025 Severity Medium CVE-2025-26754WordPress Timeline Block plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product T Timeline Block Published 02/17/2025 Severity Medium CVE-2025-22675WordPress Alert Box Block plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product A Alert Box Block – Display notice/alerts in the front end Published 02/04/2025 Severity Medium CVE-2024-13514B Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode Exploitation status Not known exploited Fix Affected product B bSlider – Create Responsive Image, Post, Product, and Video Sliders Published 02/04/2025 Severity Medium CVE-2025-24595WordPress All Embed – Elementor Addons plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product A All Embed – Elementor Addons Published 01/24/2025 Severity Medium CVE-2025-22787WordPress Button Block plugin <= 1.1.5 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product B Button Block Published 01/15/2025 Severity Medium CVE-2024-13156HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter Exploitation status Not known exploited Fix Affected product H HTML5 Video Player – Embed and Play Videos in Custom Player Published 01/14/2025 Severity Medium CVE-2025-22815WordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product B Button Block Published 01/09/2025 Severity Medium CVE-2024-12560Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication Exploitation status Not known exploited Fix Affected product B Button Block – Design Stylish, Interactive, and Multi-Functional Buttons Published 12/19/2024 Severity Medium CVE-2024-11882FAQ And Answers – Create Frequently Asked Questions Area on WP Sites <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product A Awesome FAQ – Modern Accordion, Tabs,Responsive & Super Fast FAQ Builder. Published 12/12/2024 Severity Medium CVE-2024-11880B Testimonial – testimonial plugin for WP <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Exploitation status Not known exploited Fix Affected product B B Testimonial – Customer Testimonials in Custom Layouts Published 12/04/2024 Severity Medium CVE-2024-10666Easy Twitter Feed – Twitter feeds plugin for WP <= 1.2.6 - Authenticated (Contributor+) Post Exposure Exploitation status Not known exploited Fix Affected product F Feeds for Twitter – Embed Social Media Posts with Live Updates Published 11/22/2024 Severity Medium CVE-2024-10671Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure Exploitation status Not known exploited Fix Affected product B Button Block – Design Stylish, Interactive, and Multi-Functional Buttons Published 11/21/2024 Severity Medium CVE-2024-10667Content Slider Block – Create fully functional slider with Gutenberg block <= 3.1.5 - Authenticated (Contributor+) Post Disclosure Exploitation status Not known exploited Fix Affected product C Content Slider Block – Slide Through Text or Media Content Published 11/09/2024 Severity Medium CVE-2024-10669Countdown Timer block – Display the event's date into a timer. <= 1.2.4 - Authenticated (Contributor+) Post Disclosure Exploitation status Not known exploited Fix Affected product C Countdown Timer Block – Animated Countdown for Events or Launches Published 11/09/2024 Severity Medium CVE-2024-43296WordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerability Exploitation status Not known exploited Fix Affected product F Flash & HTML5 Video Published 11/01/2024 Severity Medium CVE-2022-4974Freemius SDK <= 2.4.2 - Missing Authorization Checks Exploitation status Not known exploited Fix Affected product P Panorama – 360 Virtual Tour, Panoramic image viewer and More Published 10/16/2024 Severity Medium CVE-2024-47631WordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product L Logo Carousel – Clients logo carousel for WP Published 10/05/2024 Severity Medium CVE-2024-7727HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via h5vp_ajax_handler Exploitation status Not known exploited Fix Affected product H HTML5 Video Player – Embed and Play Videos in Custom Player Published 09/11/2024 Severity Medium CVE-2024-7721HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.34 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update Exploitation status Not known exploited Fix Affected product H HTML5 Video Player – Embed and Play Videos in Custom Player Published 09/11/2024 Severity Medium CVE-2024-43148WordPress StreamCast <= 2.2.3 - Stored Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product S StreamCast Published 08/12/2024 Severity Medium CVE-2024-37445WordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product H Html5 Audio Player Published 07/22/2024 Severity Medium CVE-2024-5522HTML5 Video Player < 2.5.27 - Unauthenticated SQLi Exploitation status Public exploit Fix Affected product H HTML5 Video Player Published 06/20/2024 Severity Medium CVE-2024-4398HTML5 Audio Player- Best WordPress Audio Player Plugin <= 2.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets Exploitation status Not known exploited Fix Affected product H HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player Published 05/10/2024 Severity Medium CVE-2024-0908Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page <= 1.13.4 - Missing Authorization to Information Disclosure Exploitation status Not known exploited Fix Affected product A Advanced Post Block – Showcase Posts with Grid, List, Card Layouts and Filters Published 05/02/2024 Severity Medium CVE-2024-30432WordPress B Slider plugin <= 1.1.12 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product B B Slider - Slider for your block editor Published 03/29/2024 Severity Medium CVE-2024-30438WordPress Print Page block plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability Exploitation status Not known exploited Fix Affected product P Print Page block Published 03/29/2024 Severity Medium CVE-2024-24714WordPress Icons Font Loader Plugin <= 1.1.4 is vulnerable to Arbitrary File Upload Exploitation status Not known exploited Fix Affected product I Icons Font Loader Published 02/26/2024 Severity High CVE-2024-23508WordPress PDF Poster - PDF Embedder Plugin for WordPress Plugin <= 2.1.17 is vulnerable to Cross Site Scripting (XSS) Exploitation status Not known exploited Fix Affected product P PDF Poster – PDF Embedder Plugin for WordPress Published 01/31/2024 Severity High CVE-2024-1061Exploitation status Not known exploited Fix Affected product H html5-video-player Published 01/30/2024 Severity High CVE-2023-6485Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS Exploitation status Public exploit Fix Affected product H Html5 Video Player Published 01/01/2024 Severity Medium CVE-2023-46084WordPress Icons Font Loader Plugin <= 1.1.2 is vulnerable to SQL Injection Exploitation status Not known exploited Fix Affected product I Icons Font Loader Published 11/06/2023 Severity High CVE-2023-5860Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload Exploitation status Not known exploited Fix Affected product I Icons Font Loader – Load Web Fonts and Icon Libraries Published 11/02/2023 Severity High CVE-2023-0170Html5 Audio Player < 2.1.12 - Contributor+ Stored XSS Exploitation status Public exploit Fix Affected product H Html5 Audio Player Published 02/06/2023 Severity Medium CVE-2021-24868Document Embedder < 1.7.9 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 02/01/2022 Severity Unknown CVE-2021-24775Document Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 02/01/2022 Severity Unknown CVE-2021-24416StreamCast < 2.1.1 - Contributor+ Stored Cross-Site Scripting Exploitation status Not confirmed Fix Affected product S StreamCast – Radio Player for WordPress Published 10/18/2021 Severity Unknown CVE-2021-24415Polo Video Gallery <= 1.2 - Contributor+ Stored Cross-Site Scripting Exploitation status Not confirmed Fix Not confirmed Affected product P Polo Video Gallery – Best wordpress video gallery plugin Published 10/18/2021 Severity Unknown CVE-2021-24413Easy Twitter Feed < 1.2 - Contributor+ Stored Cross-Site Scripting Exploitation status Not confirmed Fix Affected product E Easy Twitter Feed Published 10/18/2021 Severity Unknown CVE-2021-24412Html5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site Scripting Exploitation status Not confirmed Fix Affected product H Html5 Audio Player – Audio Player for WordPress Published 10/18/2021 Severity Unknown 
.svg){kind=icon}
