RomanCode Vulnerabilities and Affected Products

Open in search

Vulnerabilities associated with MapSVG.

Products

Clear product

Showing 19 vulnerabilities on this page for MapSVG

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.

CWE-89Jul 27, 2026
CVSS9.3v3.1EPSS0.236%PoCs0SignalsSTIX

WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability

Contributor SQL Injection in MapSVG <= 8.14.0 versions.

CWE-89Jul 23, 2026
CVSS8.5v3.1EPSS0.26%PoCs0SignalsSTIX

WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability

Contributor SQL Injection in MapSVG <= 8.14.0 versions.

CWE-89Jul 23, 2026
CVSS8.5v3.1EPSS0.26%PoCs0SignalsSTIX

WordPress MapSVG plugin <= 8.14.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions.

CWE-79Jul 23, 2026
CVSS6.5v3.1EPSS0.161%PoCs0SignalsSTIX

WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability

Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.

CWE-89Jul 23, 2026
CVSS9.3v3.1EPSS0.236%PoCs0SignalsSTIX

WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3.

CWE-434Dec 29, 2025
CVSS9.9v3.1EPSS0.365%PoCs0SignalsSTIX

WordPress MapSVG Plugin < 8.6.12 - Arbitrary File Download Vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RomanCode MapSVG mapsvg allows Path Traversal.This issue affects MapSVG: from n/a through < 8.6.12.

CWE-22Dec 18, 2025
CVSS6.5v3.1EPSS0.349%PoCs0SignalsSTIX

WordPress MapSVG plugin <= 8.7.22 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through <= 8.7.22.

CWE-79Oct 27, 2025
CVSS6.5v3.1EPSS0.19%PoCs0SignalsSTIX

WordPress MapSVG Plugin < 8.7.4 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RomanCode MapSVG mapsvg allows SQL Injection.This issue affects MapSVG: from n/a through < 8.7.4.

CWE-89Aug 14, 2025
CVSS9.3v3.1EPSS0.305%PoCs0SignalsSTIX

WordPress MapSVG plugin < 8.7.4 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through < 8.7.4.

CWE-434Jun 17, 2025
CVSS9.9v3.1EPSS0.459%PoCs0SignalsSTIX

WordPress MapSVG plugin < 8.6.13 - Privilege Escalation Vulnerability

Incorrect Privilege Assignment vulnerability in RomanCode MapSVG mapsvg allows Privilege Escalation.This issue affects MapSVG: from n/a through < 8.6.13.

CWE-266Jun 9, 2025
CVSS8.8v3.1EPSS0.294%PoCs0SignalsSTIX

WordPress MapSVG plugin < 8.6.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MapSVG: from n/a through < 8.6.13.

CWE-862May 23, 2025
CVSS7.5v3.1EPSS0.399%PoCs0SignalsSTIX

WordPress MapSVG plugin <= 8.5.31 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg allows Stored XSS.This issue affects MapSVG: from n/a through <= 8.5.31.

CWE-79May 16, 2025
CVSS6.5v3.1EPSS0.228%PoCs0SignalsSTIX

WordPress MapSVG plugin < 8.6.13 - Broken Access Control Vulnerability

Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through < 8.6.13.

CWE-862May 16, 2025
CVSS5.0v3.1EPSS0.28%PoCs0SignalsSTIX

WordPress MapSVG plugin <= 8.5.34 - Content Injection Vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG mapsvg allows Code Injection.This issue affects MapSVG: from n/a through <= 8.5.34.

CWE-94May 16, 2025
CVSS5.3v3.1EPSS0.324%PoCs0SignalsSTIX

WordPress MapSVG Lite plugin <= 8.6.9 - Arbitrary Shortcode Execution vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Code Injection.This issue affects MapSVG: from n/a through <= 8.6.9.

CWE-94May 16, 2025
CVSS5.3v3.1EPSS0.267%PoCs0SignalsSTIX

WordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload Vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through <= 8.6.4.

CWE-434Apr 17, 2025
CVSS9.9v3.1EPSS0.524%PoCs1SignalsSTIX

WordPress MapSVG Lite plugin <= 8.6.6 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through <= 8.6.6.

CWE-79Apr 9, 2025
CVSS6.5v3.1EPSS0.275%PoCs0SignalsSTIX

WordPress MapSVG Lite plugin <= 8.6.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through <= 8.6.4.

CWE-862Apr 9, 2025
CVSS5.0v3.1EPSS0.354%PoCs0SignalsSTIX