Skip to content
OpenAdvisories

Product · RomanCode

MapSVG

19 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-59527

    WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability

    Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.

    RomanCode MapSVG
  • Critical 9.3
    CVE-2026-59526

    WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability

    Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.

    RomanCode MapSVG
  • Critical 9.9
    CVE-2025-68562

    WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3.

    RomanCode MapSVG
  • Critical 9.3
    CVE-2025-54669

    WordPress MapSVG Plugin < 8.7.4 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RomanCode MapSVG mapsvg allows SQL Injection.This issue affects MapSVG: from n/a through < 8.7.4.

    RomanCode MapSVG
  • Critical 9.9
    CVE-2025-47559

    WordPress MapSVG plugin < 8.7.4 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through < 8.7.4.

    RomanCode MapSVG
  • Critical 9.9
    CVE-2025-32682 Public exploit

    WordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload Vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through <= 8.6.4.

    RomanCode MapSVG