194 matches found
CVE-2026-65455
CVE-2026-65455 affects the WordPress MapSVG plugin up to version 8.14.0. The vulnerability is described as an Administrator Arbitrary File Upload, with an overall CVSSv3.1 base score of 9.1 (CRITICAL) and a network attack vector, requiring high privileges and no user interaction. The reports do n...
EUVD-2026-48216
Contributor SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-65451
CVE-2026-65451 concerns the WordPress MapSVG plugin, affecting versions <= 8.14.0, with a SQL Injection vulnerability. The connected records specify that this is a contributor SQL injection in MapSVG
CVE-2026-65449
Technical details about CVE-2026-65449 are not publicly available in the provided documents. Monitor for updates from official advisories and vendor patches.
CVE-2026-65450
MapSVG WordPress plugin versions <= 8.14.0 contain a SQL Injection vulnerability in contributor handling. CVSS 3.1 base score 8.5 (HIGH); attack vector NETWORK, complexity LOW, privileges REQUIRED LOW, no user interaction. Affected: WordPress MapSVG plugin (
EUVD-2026-48214
Contributor Cross Site Scripting XSS in MapSVG = 8.14.0 versions...
EUVD-2026-48215
Contributor SQL Injection in MapSVG = 8.14.0 versions...
EUVD-2026-48192
Unauthenticated SQL Injection in MapSVG = 8.14.0 versions...
CVE-2026-59526
CVE-2026-59526 : Unauthenticated SQL injection in WordPress MapSVG plugin ≤ 8.14.0. Reported as a critical vulnerability (CVSS 3.1: 9.3) with network access and no privileges required; confidentiality impact High, availability Low, no integrity impact. The connected documents confirm the issue bu...
WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin MapSVG versions = 8.14.0...
WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin MapSVG versions = 8.14.0...
EUVD-2026-46168
The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFile constructor in all versions up to, and including, 8.14.0 This is due to an incorrect conditional check that prevents file validation from taking place. This makes it possible...
CVE-2026-1771
The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFile constructor in all versions up to, and including, 8.14.0 This is due to an incorrect conditional check that prevents file validation from taking place. This makes it possible...
CVE-2026-1771
The MapSVG WordPress plugin is affected up to version 8.14.0. The vulnerability stems from missing file type validation in the SVGFile constructor (due to an incorrect conditional check), allowing authenticated attackers with Administrator+ access to upload arbitrary files via the SVGFile upload ...
CVE-2026-1771 MapSVG <= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload via '/mapsvg/v1/svgfile' Endpoint
The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFile constructor in all versions up to, and including, 8.14.0 This is due to an incorrect conditional check that prevents file validation from taking place. This makes it possible...
PT-2026-61846
The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFile constructor in all versions up to, and including, 8.14.0 This is due to an incorrect conditional check that prevents file validation from taking place. This makes it possible...
WordPress MapSVG – Vector maps, Image maps, Google Maps plugin <= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload vulnerability
Authenticated Administrator+ Arbitrary File Upload vulnerability discovered by ? in WordPress Plugin MapSVG versions = 8.14.0...
CVE-2025-68562
Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3...
