Skip to content
WP PowerSuiteWP PowerSuite Docs

Quick navigation

Popular modules

Browse by category

Security19/19Login & UserssoonAdminsoonContentsoonMediasoonSEO & VisibilitysoonSpeedsoonSite Toolssoon
↑↓ navigate↵ openesc close154 guides · 155 modules
Select theme
Get Started

SVG Upload

Summarize with AI

SVG Upload lets administrators add SVG and SVGZ files to the Media Library. Files are sanitized before they are stored; other roles cannot upload them.

What it does

Section titled “What it does”
  • Adds svg / svgz (image/svg+xml) to upload mimes for users with manage_options.
  • Blocks classic and REST uploads for non-admins with SVG uploads are restricted to administrators.
  • Sanitizes SVG XML: strips dangerous tags (script, foreignObject, iframe, and related), external <use> hrefs, unsafe styles, and on* / javascript/data URLs.
  • Rejects invalid or oversized files (max 5 MB) with File is not a valid SVG.
  • Skips intermediate image sizes for SVG attachments and improves Media Library preview sizing.

When to use it

Section titled “When to use it”

Enable it if:

  • Designers need vector logos and icons in the Media Library.
  • Only trusted administrators upload media.
  • You want built-in sanitization instead of a separate SVG plugin.

When not to use it

Section titled “When not to use it”

How to enable it

Section titled “How to enable it”
  1. Go to WP PowerSuite -> Modules.
  2. Open Media or search for “SVG Upload”.
  3. Toggle SVG Upload on. No settings panel is required.

How to test it

Section titled “How to test it”
  • As an administrator, upload a simple .svg via Media -> Add New.
  • ✅ Pass: file appears in the library and can be inserted into content.
  • As an Editor (or other non-admin), try the same upload.
  • ✅ Pass: error that SVG uploads are restricted to administrators.
  • Upload an SVG that contains a <script> tag.
  • ✅ Pass: upload succeeds only after sanitization removes the script (or fails if the file is invalid).
  • ❌ Fail: confirm the module is on and you are logged in as an administrator.

Troubleshooting

Section titled “Troubleshooting”
  • Upload rejected for admin. File may be invalid XML, gzipped incorrectly, or over 5 MB.
  • Editors cannot upload. Expected - capability is manage_options only.
  • No thumbnail sizes. Expected - SVG skips intermediate sizes by design.

Manage with WP-CLI

Section titled “Manage with WP-CLI”

Prefer the command line? You can turn this module on or off with WP-CLI instead of the dashboard:

Terminal window
# Turn the module on
wp powersuite module enable svg-upload


# Turn the module off
wp powersuite module disable svg-upload


# Check whether it is on, its category, and where its settings live
wp powersuite module get svg-upload

Managing more than one site? Add --url=https://example.com to point a command at one site. If this is a Pro module, install WP PowerSuite Pro and activate your license first. New to WP-CLI? See the full command guide.

FAQ

Section titled “FAQ”
What does SVG Upload do?

It lets administrators upload SVG and SVGZ files, sanitizes them, and blocks non-admin uploads.

Is SVG Upload free?

Yes. Enable it under WP PowerSuite -> Modules.

Does SVG Upload need configuration?

No. SVG and SVGZ uploads are allowed for administrators only. No settings required.

Who can upload SVGs?

Only users with manage_options (administrators). Others get SVG uploads are restricted to administrators.

How do I turn SVG Upload off?

Go to WP PowerSuite -> Modules, find SVG Upload, and toggle it off.

Developer notes (hooks & filters)

Source: modules/svg-upload/module.php. Boot: display · context: admin, rest, ajax.

Hooks: upload_mimes, wp_handle_upload_prefilter, rest_pre_upload_file, wp_check_filetype_and_ext, intermediate_image_sizes_advanced, wp_prepare_attachment_for_js.

Section titled “Related modules”