Skip to content
OpenAdvisories

Vendor

RomanCode

19 known vulnerabilities.

Products

MapSVG 19
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-65449

    WordPress MapSVG plugin <= 8.14.0 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions.

    RomanCode MapSVG
  • Medium 6.5
    CVE-2025-54748

    WordPress MapSVG Plugin < 8.6.12 - Arbitrary File Download Vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RomanCode MapSVG mapsvg allows Path Traversal.This issue affects MapSVG: from n/a through < 8.6.12.

    RomanCode MapSVG
  • Medium 6.5
    CVE-2025-62930

    WordPress MapSVG plugin <= 8.7.22 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through <= 8.7.22.

    RomanCode MapSVG
  • Medium 5.0
    CVE-2025-47560

    WordPress MapSVG plugin < 8.6.13 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through < 8.6.13.

    RomanCode MapSVG
  • Medium 6.5
    CVE-2025-47557

    WordPress MapSVG plugin <= 8.5.31 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg allows Stored XSS.This issue affects MapSVG: from n/a through <= 8.5.31.

    RomanCode MapSVG
  • Medium 5.3
    CVE-2025-47562

    WordPress MapSVG plugin <= 8.5.34 - Content Injection Vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG mapsvg allows Code Injection.This issue affects MapSVG: from n/a through <= 8.5.34.

    RomanCode MapSVG
  • Medium 5.3
    CVE-2025-48120

    WordPress MapSVG Lite plugin <= 8.6.9 - Arbitrary Shortcode Execution vulnerability

    Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Code Injection.This issue affects MapSVG: from n/a through <= 8.6.9.

    RomanCode MapSVG
  • Medium 6.5
    CVE-2025-32683

    WordPress MapSVG Lite plugin <= 8.6.6 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through <= 8.6.6.

    RomanCode MapSVG
  • Medium 5.0
    CVE-2025-32684

    WordPress MapSVG Lite plugin <= 8.6.4 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through <= 8.6.4.

    RomanCode MapSVG