With that in mind, then you can add the following code snippet to your site ** * Allow SVG uploads for administrator users * * @param array $upload mimes Allowed mime types * * @return mixed * add filter { By default, only administrator users are allowed to add SVGs.

WordPress could become as secure as other CMSs, namely Drupal or Magento, and the responsibility goes to the owner and WP maintenance service providers.

While there is nothing wrong with hosting and managing WordPress yourself, or you want to make sure to meet most of the WordPress security basics without doing lot of heavy lifting, you may want to opt for managed WordPress hosting provider such as Kinsta or WP Engine..