Plugin icon

MapSVG – Vector maps, Image maps, Google Maps

mapsvg-lite-interactive-vector-maps

Vulnerabilities:

14

Last Updated:

September 9, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-08-31
Title
MapSVG – Vector maps, Image maps, Google Maps < 8.16.0 - Unauthenticated Server-Side Request Forgery
Fixed in
Fixed in 8.16.0
CVSS
7.2 (high)
Published
2026-07-23
Title
MapSVG Lite < 8.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.14.1
CVSS
5.5 (medium)
Published
2026-07-23
Title
MapSVG – Vector maps, Image maps, Google Maps < 8.14.1 - Unauthenticated SQL Injection
Fixed in
Fixed in 8.14.1
CVSS
7.5 (high)
Published
2026-07-22
Title
MapSVG – Vector maps, Image maps, Google Maps < 8.14.1 - Authenticated (Admin+) Arbitrary File Upload
Fixed in
Fixed in 8.14.1
CVSS
7.2 (high)
Published
2026-07-22
Title
MapSVG – Vector maps, Image maps, Google Maps < 8.14.1 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 8.14.1
CVSS
4.9 (medium)
Published
2026-07-22
Title
MapSVG – Vector maps, Image maps, Google Maps < 8.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.14.1
CVSS
5.5 (medium)
Published
2026-07-20
Title
MapSVG < 8.14.1 - Admin+ Arbitrary File Upload via SVGFile Endpoint
Fixed in
Fixed in 8.14.1
CVSS
7.2 (high)
Published
2025-12-24
Title
MapSVG < 8.7.4 - Authenticated (Contributor+) Arbitrary File Upload
Fixed in
Fixed in 8.7.4
CVSS
8.8 (high)
Published
2025-10-06
Title
MapSVG < 8.7.23 - Contributor+ Stored XSS
Fixed in
Fixed in 8.7.23
CVSS
5.9 (medium)
Published
2025-05-16
Title
MapSVG Lite < 8.6.10 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 8.6.10
CVSS
6.5 (medium)
Published
2025-04-15
Title
MapSVG Lite < 8.6.5 - Contributor+ Arbitrary File Upload
Fixed in
Fixed in 8.6.5
CVSS
8.8 (high)
Published
2025-04-09
Title
MapSVG Lite < 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.6.7
CVSS
6.4 (medium)
Published
2025-04-09
Title
MapSVG Lite < 8.6.5 - Missing Authorization
Fixed in
Fixed in 8.6.5
CVSS
4.3 (medium)
Published
2019-01-08
Title
MapSVG Lite < 3.3.0 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 3.3.0
CVSS
8.8 (high)