WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mapsvg
Published
2025-05-21
Title
MapSVG - All Kinds of Maps and Store Locator for WordPress <= 8.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mapsvg
Published
2025-05-16
Title
MapSVG < 8.6.13 - Missing Authorization
Slug
mapsvg
Published
2025-05-16
Title
MapSVG < 8.6.11 - Unauthenticated Arbitrary Shortcode Execution
Slug
mapsvg
Published
2025-05-22
Title
MapSVG < 8.6.13 - Missing Authorization
Slug
mapsvg
Published
2025-06-12
Title
MapSVG < 8.7.4 - Contributor+ Arbitrary File Upload
Slug
mapsvg
Published
2025-06-09
Title
MapSVG < 8.6.13 - Contributor+ Privilege Esclation
Slug
mapsvg
Published
2025-08-08
Title
MapSVG < 8.7.4 - Unauthenticated SQL Injection
Slug
mapsvg
Published
2025-07-31
Title
MapSVG < 8.6.12 - Authenticated (Contributor+) Arbitrary File Download
Slug
mapsvg
Published
2026-07-23
Title
MapSVG < 8.14.1 - Unauthenticated SQL Injection
Slug
mapsvg
Published
2026-07-22
Title
MapSVG < 8.14.1 - Authenticated (Contributor+) SQL Injection
Slug
mapsvg-lite-interactive-vector-maps
Published
2019-01-08
Title
MapSVG Lite < 3.3.0 - Cross-Site Request Forgery (CSRF)
Slug
mapsvg-lite-interactive-vector-maps
Published
2025-04-09
Title
MapSVG Lite < 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mapsvg-lite-interactive-vector-maps
Published
2025-04-09
Title
MapSVG Lite < 8.6.5 - Missing Authorization
Slug
mapsvg-lite-interactive-vector-maps
Published
2025-04-15
Title
MapSVG Lite < 8.6.5 - Contributor+ Arbitrary File Upload
Slug
mapsvg-lite-interactive-vector-maps
Published
2025-05-16
Title
MapSVG Lite < 8.6.10 - Unauthenticated Arbitrary Shortcode Execution
Slug
mapsvg-lite-interactive-vector-maps
Published
2025-10-06
Title
MapSVG < 8.7.23 - Contributor+ Stored XSS
Slug
mapsvg-lite-interactive-vector-maps
Published
2025-12-24
Title
MapSVG < 8.7.4 - Authenticated (Contributor+) Arbitrary File Upload
Slug
mapsvg-lite-interactive-vector-maps
Published
2026-07-20
Title
MapSVG < 8.14.1 - Admin+ Arbitrary File Upload via SVGFile Endpoint
Slug
mapsvg-lite-interactive-vector-maps
Published
2026-07-23
Title
MapSVG Lite < 8.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mapsvg-lite-interactive-vector-maps
Published
2026-07-22
Title
MapSVG – Vector maps, Image maps, Google Maps < 8.14.1 - Authenticated (Contributor+) SQL Injection
Slug
mapsvg-lite-interactive-vector-maps
Published
2026-07-23
Title
MapSVG – Vector maps, Image maps, Google Maps < 8.14.1 - Unauthenticated SQL Injection
Slug
mapsvg-lite-interactive-vector-maps
Published
2026-07-22
Title
MapSVG – Vector maps, Image maps, Google Maps < 8.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
mapsvg-lite-interactive-vector-maps
Published
2026-07-22
Title
MapSVG – Vector maps, Image maps, Google Maps < 8.14.1 - Authenticated (Admin+) Arbitrary File Upload
Slug
mapsvg-lite-interactive-vector-maps
Published
2026-08-31
Title
MapSVG – Vector maps, Image maps, Google Maps < 8.16.0 - Unauthenticated Server-Side Request Forgery
Slug
mapwiz
Published
2023-01-19
Title
Mapwiz <= 1.0.1 - Admin+ SQLi