Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

19 records

Vendor: RomanCode Clear all filters
TI-2025-42083 CVE-2025-68562 · GHSA-94f7-w8j3-ppqr

WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00418 Published 2025-12-29 No fix listed CWE-434
TI-2025-34511 CVE-2025-54748 · GHSA-2ffc-fhcm-rq53

WordPress MapSVG Plugin < 8.6.12 - Arbitrary File Download Vulnerability

Priority LOW 29

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RomanCode MapSVG mapsvg allows Path Traversal.This issue affects MapSVG: from n/a through < 8.6.12.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0039 Published 2025-12-18 No fix listed CWE-22
TI-2025-39078 CVE-2025-62930 · GHSA-58cj-fhxc-8766

WordPress MapSVG plugin <= 8.7.22 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00204 Published 2025-10-27 No fix listed CWE-79
TI-2025-34432 CVE-2025-54669 · GHSA-38rw-9px6-xgxx

WordPress MapSVG Plugin < 8.7.4 - SQL Injection Vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RomanCode MapSVG mapsvg allows SQL Injection.This issue affects MapSVG: from n/a through < 8.7.4.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00333 Published 2025-08-14 No fix listed CWE-89
TI-2025-30056 CVE-2025-47559 · GHSA-mm3j-jm95-33fw

WordPress MapSVG plugin < 8.7.4 - Arbitrary File Upload vulnerability

Priority MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through < 8.7.4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00552 Published 2025-06-17 No fix listed CWE-434
TI-2025-30058 CVE-2025-47561 · GHSA-jfvx-5rr4-h3pm

WordPress MapSVG plugin < 8.6.13 - Privilege Escalation Vulnerability

Priority MEDIUM 40

Incorrect Privilege Assignment vulnerability in RomanCode MapSVG mapsvg allows Privilege Escalation.This issue affects MapSVG: from n/a through < 8.6.13.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00359 Published 2025-06-09 No fix listed CWE-266
TI-2025-30055 CVE-2025-47558 · GHSA-mchr-xvw2-q64f

WordPress MapSVG plugin < 8.6.13 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MapSVG: from n/a through < 8.6.13.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00447 Published 2025-05-23 No fix listed CWE-862
TI-2025-30054 CVE-2025-47557 · GHSA-jc84-wwc9-v77w

WordPress MapSVG plugin <= 8.5.31 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg allows Stored XSS.This issue affects MapSVG: from n/a through <= 8.5.31.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00262 Published 2025-05-16 No fix listed CWE-79
TI-2025-30057 CVE-2025-47560 · GHSA-h8fr-pjww-7cvj

WordPress MapSVG plugin < 8.6.13 - Broken Access Control Vulnerability

Priority LOW 23

Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through < 8.6.13.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00314 Published 2025-05-16 No fix listed CWE-862
TI-2025-30059 CVE-2025-47562 · GHSA-crw6-rj3g-7hfh

WordPress MapSVG plugin <= 8.5.34 - Content Injection Vulnerability

Priority LOW 30

Improper Control of Generation of Code ('Code Injection') vulnerability in RomanCode MapSVG mapsvg allows Code Injection.This issue affects MapSVG: from n/a through <= 8.5.34.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00364 Published 2025-05-16 No fix listed CWE-94
TI-2025-23747 CVE-2025-32682 · GHSA-5p4c-wfcx-pf2f

WordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload Vulnerability

Priority MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through <= 8.6.4.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00575 Published 2025-04-17 No fix listed CWE-434
TI-2025-23748 CVE-2025-32683 · GHSA-7pp9-494f-jgr4

WordPress MapSVG Lite plugin <= 8.6.6 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00298 Published 2025-04-09 No fix listed CWE-79
TI-2025-23749 CVE-2025-32684 · GHSA-hg33-c74g-5r58

WordPress MapSVG Lite plugin <= 8.6.4 - Broken Access Control Vulnerability

Priority LOW 23

Missing Authorization vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through <= 8.6.4.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00383 Published 2025-04-09 No fix listed CWE-862