Plugin icon

MapSVG (Envato Lifetime License)

mapsvg

Vulnerabilities:

10

Last Updated:

March 10, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-08-08
Title
MapSVG < 8.7.4 - Unauthenticated SQL Injection
Fixed in
Fixed in 8.7.4
CVSS
7.5 (high)
Published
2025-07-31
Title
MapSVG < 8.6.12 - Authenticated (Contributor+) Arbitrary File Download
Fixed in
Fixed in 8.6.12
CVSS
4.3 (medium)
Published
2025-06-12
Title
MapSVG < 8.7.4 - Contributor+ Arbitrary File Upload
Fixed in
Fixed in 8.7.4
CVSS
7.2 (high)
Published
2025-06-09
Title
MapSVG < 8.6.13 - Contributor+ Privilege Esclation
Fixed in
Fixed in 8.6.13
CVSS
7.2 (high)
Published
2025-05-22
Title
MapSVG < 8.6.13 - Missing Authorization
Fixed in
Fixed in 8.6.13
CVSS
5.3 (medium)
Published
2025-05-21
Title
MapSVG - All Kinds of Maps and Store Locator for WordPress <= 8.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2025-05-16
Title
MapSVG < 8.6.11 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 8.6.11
CVSS
6.5 (medium)
Published
2025-05-16
Title
MapSVG < 8.6.11 - Contributor+ Stored XSS
Fixed in
Fixed in 8.6.11
CVSS
5.9 (medium)
Published
2025-05-16
Title
MapSVG < 8.6.13 - Missing Authorization
Fixed in
Fixed in 8.6.13
CVSS
4.3 (medium)
Published
2022-04-18
Title
MapSVG < 6.2.20 - Unauthenticated SQLi
Fixed in
Fixed in 6.2.20
CVSS
8.6 (high)