WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is an application plugin. WordPress Allow svg files plugin versions prior to 1.1 contain a file upload vulnerability that stems from the inability to properly validate uploaded files. An attacker could exploit this vulnerability to upload PHP files.