SVG Manager

3 min read

Updated Oct 20, 2026

Version 0.8.1

Beginner

Quick Answer

SVG Manager (NitroShock menu) switches SVG uploads on or off site-wide, sets who may upload them (administrators only by default), and cleans every SVG on upload, removing scripts, event attributes, unsafe links and non-SVG elements such as style blocks. Cards offer Copy URL, Re-sanitize and Delete.

WordPress blocks SVG uploads by default because an SVG file can carry scripts. The NitroShock Page Builder adds SVG support and cleans every SVG as it is uploaded, and NitroShock → SVG Manager is where you switch that on or off and manage your SVG files.

Turning SVG Support On or Off

The SVG Support switch at the top of SVG Manager turns SVG uploads on or off for the whole site. It is on after you install the plugin. While it is on, SVGs can be uploaded through SVG Manager or the normal Media Library, and every one is cleaned on upload.

Uploads by, next to the switch, sets who may upload them:

Administrators only (the default).
Anyone who can upload files - every user WordPress allows to upload (authors and above, by default).

An SVG can carry active content, so keep the default unless other users need to add SVGs themselves. Files are cleaned on upload whichever you choose.

Turning it off stops new SVG uploads. Files you already uploaded stay in the Media Library and keep working on the pages that use them.

Uploading

Click Upload SVG. The WordPress media window opens filtered to SVG files; drop in or select one or more files and click Upload. When you close the window, the new files appear in the grid. Uploading through Media → Add New works the same way and the files are cleaned the same way.

What Cleaning Removes

Each SVG is checked against a list of allowed SVG elements and attributes. Anything not on the list is removed. In practice that means:

Removed: <script> elements, event attributes such as onclick and onload, javascript: and similar links, embedded SVG data URLs, the DOCTYPE, and any element or attribute that is not a standard SVG one, including <style> blocks and any HTML inside <foreignObject>.
Kept: shapes, paths, text, groups, symbols, gradients, patterns, masks, clip paths, filters, markers, inline style and presentation attributes such as fill and stroke, CSS classes, and SMIL animation (animate, animateTransform, animateMotion, set).

Colors disappeared after upload? Design tools often color shapes through a <style> block and classes, and that block is removed. Export the SVG with presentation attributes instead (in Illustrator, under the SVG options, set Styling to Presentation Attributes), or move the colors into each shape's fill and stroke.

Managing Your SVGs

The grid lists every SVG in your Media Library, with a search box (by name) and Previous and Next buttons when there are many. Each card has three buttons:

Copy URL - copies the file's address, for use in an <img> tag or CSS.
Re-sanitize - cleans that file again.
Delete - deletes the file permanently after you confirm.

Re-sanitize All runs every SVG in the Media Library through the cleaner again, which is worth doing once for SVGs uploaded before the plugin was installed or by another plugin.

Using SVGs in Pages and Components

Insert SVG in Component Studio, or the SVG element in the page builder, picks a file from your media library and places it in the design as an image.
As an image: use the copied URL in an <img> tag. Simple and cached by the browser, but CSS on your page cannot reach inside the SVG.
Inline: paste the SVG's code straight into the HTML tab. Inline SVGs can be colored and animated from your page's CSS, for example with fill: var(--color-primary).

Inline SVG code you paste into the builder is part of the page's HTML and is not run through the upload cleaner, so only paste SVG code from sources you trust.

FAQ

Will cleaning change how my SVG looks?

Usually not. The common exception is an SVG that relies on a <style> block for its colors; see the tip above.

Are animated SVGs supported?

Yes, SMIL animation and CSS animation in inline styles or in your page's CSS. Script-driven animation inside the SVG file is removed.

Can I limit who uploads SVGs?

Yes. By default only administrators can upload SVGs. Set Uploads by to Anyone who can upload files to open it to every user WordPress allows to upload, or turn SVG Support off to stop SVG uploads entirely.