Advisories · Technology

RomanCode MapSVG.

Every CVE that names RomanCode MapSVG among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-59527 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
- RomanCode MapSVG
- SQL injection
Not analysed yet 27 Jul 2026
CVE-2026-65451 CVE record

CVSS 8.5 High

WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
- RomanCode MapSVG
- SQL injection
Not analysed yet 23 Jul 2026
CVE-2026-65450 CVE record

CVSS 8.5 High

WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
- RomanCode MapSVG
- SQL injection
Not analysed yet 23 Jul 2026
CVE-2026-65449 CVE record

CVSS 6.5 Medium

WordPress MapSVG plugin <= 8.14.0 - Cross Site Scripting (XSS) vulnerability
- RomanCode MapSVG
- Cross-site scripting (XSS)
Not analysed yet 23 Jul 2026
CVE-2026-59526 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
- RomanCode MapSVG
- SQL injection
Not analysed yet 23 Jul 2026
CVE-2025-68562 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability
- RomanCode MapSVG
- Unrestricted file upload
Not analysed yet 29 Dec 2025
CVE-2025-54748 CVE record

CVSS 6.5 Medium

WordPress MapSVG Plugin < 8.6.12 - Arbitrary File Download Vulnerability
- RomanCode MapSVG
- Path traversal
Not analysed yet 18 Dec 2025
CVE-2025-62930 CVE record

CVSS 6.5 Medium

WordPress MapSVG plugin <= 8.7.22 - Cross Site Scripting (XSS) vulnerability
- RomanCode MapSVG
- Cross-site scripting (XSS)
Not analysed yet 27 Oct 2025
CVE-2025-54669 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress MapSVG Plugin < 8.7.4 - SQL Injection Vulnerability
- RomanCode MapSVG
- SQL injection
Not analysed yet 14 Aug 2025
CVE-2025-47559 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

WordPress MapSVG plugin < 8.7.4 - Arbitrary File Upload vulnerability
- RomanCode MapSVG
- Unrestricted file upload
Not analysed yet 17 Jun 2025
CVE-2025-47561 CVE record

CVSS 8.8 High

WordPress MapSVG plugin < 8.6.13 - Privilege Escalation Vulnerability
- RomanCode MapSVG
- Privilege escalation
Not analysed yet 9 Jun 2025
CVE-2025-47558 CVE record

CVSS 7.5 High

WordPress MapSVG plugin < 8.6.13 - Broken Access Control vulnerability
- RomanCode MapSVG
- Broken access control
Not analysed yet 23 May 2025
CVE-2025-47557 CVE record

CVSS 6.5 Medium

WordPress MapSVG plugin <= 8.5.31 - Cross Site Scripting (XSS) vulnerability
- RomanCode MapSVG
- Cross-site scripting (XSS)
Not analysed yet 16 May 2025
CVE-2025-47560 CVE record

CVSS 5.0 Medium

WordPress MapSVG plugin < 8.6.13 - Broken Access Control Vulnerability
- RomanCode MapSVG
- Broken access control
Not analysed yet 16 May 2025
CVE-2025-47562 CVE record

CVSS 5.3 Medium

WordPress MapSVG plugin <= 8.5.34 - Content Injection Vulnerability
- RomanCode MapSVG
- Code injection
Not analysed yet 16 May 2025
CVE-2025-48120 CVE record

CVSS 5.3 Medium

WordPress MapSVG Lite plugin <= 8.6.9 - Arbitrary Shortcode Execution vulnerability
- RomanCode MapSVG
- Code injection
Not analysed yet 16 May 2025
CVE-2025-32682 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

WordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload Vulnerability
- RomanCode MapSVG
- Unrestricted file upload
Not analysed yet 17 Apr 2025
CVE-2025-32683 CVE record

CVSS 6.5 Medium

WordPress MapSVG Lite plugin <= 8.6.6 - Cross Site Scripting (XSS) Vulnerability
- RomanCode MapSVG
- Cross-site scripting (XSS)
Not analysed yet 9 Apr 2025
CVE-2025-32684 CVE record

CVSS 5.0 Medium

WordPress MapSVG Lite plugin <= 8.6.4 - Broken Access Control Vulnerability
- RomanCode MapSVG
- Broken access control
Not analysed yet 9 Apr 2025