oyatek

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

oyatek records in CISA KEV

No oyatek vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-01454 CVE-2026-1771 · GHSA-2h4g-724w-gfcv

MapSVG <= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload via '/mapsvg/v1/svgfile' Endpoint

LOW 36

The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFile constructor in all versions up to, and including, 8.14.0 This is due to an incorrect conditional…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01094 Published 2026-07-21 No fix listed CWE-20

TI-2025-08440 CVE-2025-9205 · GHSA-39xj-89xc-9j56

MapSVG Lite <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 8.14.0.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00321 Published 2026-07-24 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0