187 matches found
MapSVG < 6.2.20 - Unauthenticated SQLi
The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users. id: CVE-2022-0592 info: name: MapSVG 6.2.20 - Unauthenticated SQLi author: DhiyaneshDK...
CVE-2026-59527
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
EUVD-2026-49203
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-59527
The CVE-2026-59527 entry describes an unauthenticated SQL Injection in the WordPress MapSVG plugin, affected versions 8.14.0 and earlier. The issue originates from MapSVG’s handling of inputs in vulnerable components, allowing a remote attacker to manipulate queries and potentially access or modi...
CVE-2026-59527
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-59527 WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
CVE-2025-9205
The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 8.14.0. This is due to insufficient input sanitization and output escaping on user supplied attributes within the map options. This makes it possible for authenticated attackers, wit...
CVE-2025-9205
CVE-2025-9205 affects MapSVG Lite for WordPress up to version 8.14.0. The issue is a stored XSS vulnerability caused by insufficient input sanitization and output escaping on user-supplied map options attributes. It can be exploited by authenticated attackers with contributor-level access and abo...
EUVD-2025-210507
The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 8.14.0. This is due to insufficient input sanitization and output escaping on user supplied attributes within the map options. This makes it possible for authenticated attackers, wit...
CVE-2025-9205 MapSVG Lite <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 8.14.0. This is due to insufficient input sanitization and output escaping on user supplied attributes within the map options. This makes it possible for authenticated attackers, wit...
CVE-2025-9205
The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 8.14.0. This is due to insufficient input sanitization and output escaping on user supplied attributes within the map options. This makes it possible for authenticated attackers, wit...
PT-2026-64223
The MapSVG plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 8.14.0. This is due to insufficient input sanitization and output escaping on user supplied attributes within the map options. This makes it possible for authenticated attackers, wit...
EUVD-2026-48220
Administrator Arbitrary File Upload in MapSVG = 8.14.0 versions...
CVE-2026-65455
CVE-2026-65455 affects the WordPress MapSVG plugin up to version 8.14.0. The vulnerability is described as an Administrator Arbitrary File Upload, with an overall CVSSv3.1 base score of 9.1 (CRITICAL) and a network attack vector, requiring high privileges and no user interaction. The reports do n...
EUVD-2026-48216
Contributor SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-65451
CVE-2026-65451 concerns the WordPress MapSVG plugin, affecting versions <= 8.14.0, with a SQL Injection vulnerability. The connected records specify that this is a contributor SQL injection in MapSVG
CVE-2026-65450
MapSVG WordPress plugin versions <= 8.14.0 contain a SQL Injection vulnerability in contributor handling. CVSS 3.1 base score 8.5 (HIGH); attack vector NETWORK, complexity LOW, privileges REQUIRED LOW, no user interaction. Affected: WordPress MapSVG plugin (
EUVD-2026-48214
Contributor Cross Site Scripting XSS in MapSVG = 8.14.0 versions...