Limited-Time Offer

Get Extra 20% off on FullCharge Yearly Plan — available for first 10 users only. Don’t miss out! 🚀

TrackWP

Safe SVG · Version history

Safe SVG changelog and version history

Latest version
2.5.2
Oct 26, 2026 (14 days ago)
Releases
56
since 2015
In the last year
4
about one every 22 days
Tested up to
WordPress 7.1.4
PHP 7.4 or later

Releases each year

  • 20153 releases
  • 20163 releases
  • 201714 releases
  • 20184 releases
  • 20197 releases
  • 20203 releases
  • 20225 releases
  • 20235 releases
  • 20245 releases
  • 20253 releases
  • 20264 releases

20264 releases

  1. Safe SVG 2.5.2Latest

    • Added: New filter, safe_svg_max_inflated_size, allowing you to increase or decrease the max size an SVG can inflate to (GHSA-xjvq-4jwj-3mwq).
    • Security: Updates the underlying enshrined/svg-sanitize package to v1.1.0 (#355).
    • Security: Resolve GHSA-xjvq-4jwj-3mwq (GHSA-xjvq-4jwj-3mwq).
    • Security: Resolve GHSA-xpv8-cx9q-v65f (GHSA-xpv8-cx9q-v65f).
    • Security: Resolve GHSA-h56m-22q9-r6xc (GHSA-h56m-22q9-r6xc).
    • Security: Resolve GHSA-vm75-mq6x-x57m (GHSA-vm75-mq6x-x57m).

  2. Safe SVG 2.5.1

    • Added: New REST endpoint, /safe-svg/v1/svg/ATTACHMENT-ID, that can be passed an attachment ID for an SVG and will return sanitized markup (props @dkotter, @peterwilsoncc via GHSA-3hhm-5qc9-q4xf).
    • Removed: Remove the $sanitizer property from the safe_svg class. If you directly use the safe_svg class in order to access the $sanitizer property, you’ll need to update your code to instead use the new Svg_Sanitizer class (props @dkotter, @peterwilsoncc via GHSA-3hhm-5qc9-q4xf).
    • Security: Resolve GHSA-qq4c-2xh7-x2wf (props @dhakalananda, @dkotter, @peterwilsoncc, @darylldoyle, @jeffpaul via GHSA-qq4c-2xh7-x2wf).
    • Security: Resolve GHSA-vcfp-vw5v-gc9c (props @spectreDeveloper, @dkotter, @peterwilsoncc, @darylldoyle, @jeffpaul via GHSA-vcfp-vw5v-gc9c).
    • Security: Resolve GHSA-3hhm-5qc9-q4xf (props @dkotter, @peterwilsoncc via GHSA-3hhm-5qc9-q4xf).

  3. Safe SVG 2.5.0

    • Security: Prevented direct access of PHP files (props @mehrazmorshed, @dkotter via #300).
    • Security: The Inline SVG block now renders SVGs that carry their own <style> element inside a shadow root, so their CSS is scoped to the block instead of applying to the whole page (props @0xb1lal, @darylldoyle, @dkotter, @jeffpaul, @peterwilsoncc via #328, GHSA-6w27-923c-c64m).
    • Security: Bump enshrined/svg-sanitize from ^0.22.0 to ^1.0.0 to pull in security fixes (props @dkotter, @jeffpaul, @peterwilsoncc via #327).
    • Added: Link support for the SVG Inline block, including URL input, new tab toggle, and nofollow/sponsored rel options (props @vegetable-bits, @mgiannopoulos24, @jeffpaul, @thrijith, @peterwilsoncc, @dkotter, @pbiron via #315).
    • Added: New safe_svg_inline_use_shadow_dom filter to control which inline SVGs are isolated in a shadow root, and new safe_svg_inline_shadow_styles filter to adjust the CSS injected alongside them (props @darylldoyle, @dkotter, @jeffpaul, @peterwilsoncc via #328).
    • Added: New safe_svg_remove_remote_references filter to strip remote url(), @import and image-set() references, along with remote href targets, from uploaded SVGs. Off by default, because legitimate SVGs reference remote fonts and images but use this filter to turn it on (props @darylldoyle, @dkotte…
    • Added: Added support for Enable Media Replace plugin (props @gthayer, @jeffpaul, @peterwilsoncc via #285).
    • Changed: Bump WordPress minimum supported version to 6.9 (props @zamanq, @peterwilsoncc via #320).
    • Changed: Bump “tested up to header” to indicate WordPress 7.1 support (props @navi151, @peterwilsoncc, @dkotter, @jeffpaul, @zamanq via #290, #311, #320).
    • Changed: Theme CSS can no longer target an inline SVG that carries its own <style> element, because stylesheets cannot reach into a shadow root. Style those SVGs from within the SVG itself, or opt out with the safe_svg_inline_use_shadow_dom filter. Inherited properties, including color/currentColor…
    • Changed: Updated blueprint file for WordPress.org live previews (props @fellyph, @jeffpaul, @peterwilsoncc via #287).
    • Changed: Bump svgo from 3.2.0 to 3.3.5 (props @dependabot[bot], @jeffpaul, @peterwilsoncc, @dependabot via #309).
    • View historical changelog details here.

  4. Safe SVG 2.4.0

20253 releases

  1. Safe SVG 2.3.3

  2. Safe SVG 2.3.2

  3. Safe SVG 2.3.1

20245 releases

  1. Safe SVG 2.3.0

  2. Safe SVG 2.2.6

  3. Safe SVG 2.2.5

  4. Safe SVG 2.2.4

  5. Safe SVG 2.2.3

20235 releases

  1. Safe SVG 2.2.2

  2. Safe SVG 2.2.1

  3. Safe SVG 2.2.0

  4. Safe SVG 2.1.1

  5. Safe SVG 2.1.0

20225 releases

  1. Safe SVG 2.0.3

  2. Safe SVG 2.0.2

  3. Safe SVG 2.0.1

  4. Safe SVG 2.0.0

  5. Safe SVG 1.9.10

20203 releases

  1. Safe SVG 1.9.9

  2. Safe SVG 1.9.8

  3. Safe SVG 1.9.7

20197 releases

  1. Safe SVG 1.9.6

  2. Safe SVG 1.9.5

  3. Safe SVG 1.9.4

  4. Safe SVG 1.9.3

  5. Safe SVG 1.9.2

  6. Safe SVG 1.9.1

  7. Safe SVG 1.9.0

20184 releases

  1. Safe SVG 1.8.1

  2. Safe SVG 1.8.0

  3. Safe SVG 1.7.1

  4. Safe SVG 1.6.1

201714 releases

  1. Safe SVG 1.6.0

  2. Safe SVG 1.5.3

  3. Safe SVG 1.5.2

  4. Safe SVG 1.5.1

  5. Safe SVG 1.5.0

  6. Safe SVG 1.4.5

  7. Safe SVG 1.4.4

  8. Safe SVG 1.4.3

  9. Safe SVG 1.4.2

  10. Safe SVG 1.4.1

  11. Safe SVG 1.4.0

  12. Safe SVG 1.3.4

  13. Safe SVG 1.3.3

  14. Safe SVG 1.3.2

20163 releases

  1. Safe SVG 1.3.1

  2. Safe SVG 1.3.0

  3. Safe SVG 1.2.0

20153 releases

  1. Safe SVG 1.1.1

  2. Safe SVG 1.1.0

  3. Safe SVG 1.0.0

Questions about Safe SVG’s releases

What is the latest version of Safe SVG?

2.5.2, released on Oct 26, 2026 (2 weeks ago). It’s tested up to WordPress 7.1.4 and needs PHP 7.4 or later.

How often is Safe SVG updated?

4 releases in the last year, about one every 22 days. Its first release on WordPress.org dates from July 2015.

Know when your rivals ship

Track your plugin and its rivals: TrackWP sees each new release in the nightly snapshot and alerts you, with what it did to their rank.

Start free

Release dates come from the day each version’s folder was made in Safe SVG’s WordPress.org SVN repository; the notes from its readme’s changelog, as its authors wrote it.