Read the docs

RomanCode

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

RomanCode records in CISA KEV

No RomanCode vulnerabilities are listed in CISA KEV.

Records

19 records

TI-2025-42083 CVE-2025-68562 · GHSA-94f7-w8j3-ppqr

WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00418 Published 2025-12-29 No fix listed CWE-434
TI-2025-34432 CVE-2025-54669 · GHSA-38rw-9px6-xgxx

WordPress MapSVG Plugin < 8.7.4 - SQL Injection Vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RomanCode MapSVG mapsvg allows SQL Injection.This issue affects MapSVG: from n/a through < 8.7.4.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00333 Published 2025-08-14 No fix listed CWE-89
TI-2025-30056 CVE-2025-47559 · GHSA-mm3j-jm95-33fw

WordPress MapSVG plugin < 8.7.4 - Arbitrary File Upload vulnerability

Priority MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through < 8.7.4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00552 Published 2025-06-17 No fix listed CWE-434
TI-2025-23747 CVE-2025-32682 · GHSA-5p4c-wfcx-pf2f

WordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload Vulnerability

Priority MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through <= 8.6.4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00575 Published 2025-04-17 No fix listed CWE-434
TI-2025-30058 CVE-2025-47561 · GHSA-jfvx-5rr4-h3pm

WordPress MapSVG plugin < 8.6.13 - Privilege Escalation Vulnerability

Priority MEDIUM 40

Incorrect Privilege Assignment vulnerability in RomanCode MapSVG mapsvg allows Privilege Escalation.This issue affects MapSVG: from n/a through < 8.6.13.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00359 Published 2025-06-09 No fix listed CWE-266
TI-2025-30055 CVE-2025-47558 · GHSA-mchr-xvw2-q64f

WordPress MapSVG plugin < 8.6.13 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MapSVG: from n/a through < 8.6.13.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00447 Published 2025-05-23 No fix listed CWE-862
TI-2025-30059 CVE-2025-47562 · GHSA-crw6-rj3g-7hfh

WordPress MapSVG plugin <= 8.5.34 - Content Injection Vulnerability

Priority LOW 30

Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG mapsvg allows Code Injection.This issue affects MapSVG: from n/a through <= 8.5.34.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00364 Published 2025-05-16 No fix listed CWE-94
TI-2025-34511 CVE-2025-54748 · GHSA-2ffc-fhcm-rq53

WordPress MapSVG Plugin < 8.6.12 - Arbitrary File Download Vulnerability

Priority LOW 29

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RomanCode MapSVG mapsvg allows Path Traversal.This issue affects MapSVG: from n/a through < 8.6.12.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0039 Published 2025-12-18 No fix listed CWE-22
TI-2025-23748 CVE-2025-32683 · GHSA-7pp9-494f-jgr4

WordPress MapSVG Lite plugin <= 8.6.6 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00298 Published 2025-04-09 No fix listed CWE-79
TI-2025-39078 CVE-2025-62930 · GHSA-58cj-fhxc-8766

WordPress MapSVG plugin <= 8.7.22 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00204 Published 2025-10-27 No fix listed CWE-79
TI-2025-30054 CVE-2025-47557 · GHSA-jc84-wwc9-v77w

WordPress MapSVG plugin <= 8.5.31 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg allows Stored XSS.This issue affects MapSVG: from n/a through <= 8.5.31.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00262 Published 2025-05-16 No fix listed CWE-79
TI-2025-30057 CVE-2025-47560 · GHSA-h8fr-pjww-7cvj

WordPress MapSVG plugin < 8.6.13 - Broken Access Control Vulnerability

Priority LOW 23

Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through < 8.6.13.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00314 Published 2025-05-16 No fix listed CWE-862
TI-2025-23749 CVE-2025-32684 · GHSA-hg33-c74g-5r58

WordPress MapSVG Lite plugin <= 8.6.4 - Broken Access Control Vulnerability

Priority LOW 23

Missing Authorization vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through <= 8.6.4.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00383 Published 2025-04-09 No fix listed CWE-862
Open these records in search →