Approved changes feed: RSS · Atom

cpe:2.3:a:romancode:mapsvg:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRomancode (54507776-c111-5641-a052-56506d685936)
ProductMapsvg (4a585e40-7904-5c78-b672-9311ef4fdb29)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-65451 vulnerable 2026-07-29 01:06:19.983916 WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
HIGH (8.5)
Contributor SQL Injection in MapSVG <= 8.14.0 versions.
Published: 2026-07-23T11:18:34.387Z
Updated: 2026-07-23T13:46:15.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-65449 vulnerable 2026-07-29 01:06:19.983718 WordPress MapSVG plugin <= 8.14.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions.
Published: 2026-07-23T11:18:33.123Z
Updated: 2026-07-23T14:52:16.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59526 vulnerable 2026-07-29 01:03:17.495977 WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
CRITICAL (9.3)
Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.
Published: 2026-07-23T11:18:18.903Z
Updated: 2026-07-23T13:51:11.045Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-68562 vulnerable 2026-06-08 07:41:21.388512 WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability
CRITICAL (9.9)
Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3.
Published: 2025-12-29T21:13:24.913Z
Updated: 2026-04-28T16:14:30.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62930 vulnerable 2026-06-08 07:39:17.035787 WordPress MapSVG plugin <= 8.7.22 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through <= 8.7.22.
Published: 2025-10-27T01:34:01.039Z
Updated: 2026-04-28T16:14:06.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54748 vulnerable 2026-06-08 07:33:13.151242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54669 vulnerable 2026-06-08 07:33:13.047313 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48120 vulnerable 2026-06-08 07:27:15.499798 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47562 vulnerable 2026-06-08 07:27:14.559136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47561 vulnerable 2026-06-08 07:27:14.558785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47560 vulnerable 2026-06-08 07:27:14.558498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47559 vulnerable 2026-06-08 07:27:14.558222 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47558 vulnerable 2026-06-08 07:27:14.556829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47557 vulnerable 2026-06-08 07:27:14.556495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32684 vulnerable 2026-06-08 07:19:00.398042 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32683 vulnerable 2026-06-08 07:19:00.397755 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32682 vulnerable 2026-06-08 07:19:00.397409 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.