VulnCrest
Search
Create account
Report an incident
Radar sectionsPlugins & themes
Check my site

WordPress plugin

MapSVG – Vector maps, Google Maps, Image maps – with AI assistant security & vulnerabilities

mapsvg-lite-interactive-vector-maps— active installsLast vulnerability Nov 7, 2026

No known unpatched vulnerabilities in the latest version

All 20 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin
20Known vulnerabilities
  • Critical0
  • High8
  • Medium12
  • Low0
Vulnerabilities per year
2019: 1 vulnerability1192025: 6 vulnerabilities6252026: 13 vulnerabilities1326

All MapSVG – Vector maps, Google Maps, Image maps – with AI assistant vulnerabilities

MapSVG – Vector maps, Google Maps, Image maps – with AI assistant vulnerabilities
SeverityVulnerabilityCVEPublished
Medium5.3Missing Authorization
≤8.16.3Update to 9.0.0
CVE-2026-123475
High8.8Authenticated (Contributor+) Arbitrary File Upload
≤8.16.1Update to 8.16.2
CVE-2026-111406
High8.1Authenticated (Contributor+) Arbitrary File Deletion
≤8.16.1Update to 8.16.2
CVE-2026-111398
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤8.16.1Update to 8.16.2
CVE-2026-111405
Medium6.5Authenticated (Contributor+) SQL Injection
≤8.16.1Update to 8.16.2
CVE-2026-111399
Medium5.3Unauthenticated Information Exposure
≤8.16.1Update to 8.16.2
CVE-2026-111397
High7.2Unauthenticated Server-Side Request Forgery
≤8.15.0Update to 8.16.0
CVE-2026-82852
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤8.14.0Update to 8.14.1
CVE-2025-9205
High7.5Unauthenticated SQL Injection
≤8.14.0Update to 8.14.1
CVE-2026-59527
High7.2Authenticated (Admin+) Arbitrary File Upload
≤8.14.0Update to 8.14.1
CVE-2026-65455
Medium6.5Authenticated (Contributor+) SQL Injection
≤8.14.0Update to 8.14.1
CVE-2026-65450
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤8.14.0Update to 8.14.1
CVE-2026-65449
High7.2Authenticated (Administrator+) Arbitrary File Upload via '/mapsvg/v1/svgfile' Endpoint
≤8.14.0Update to 8.14.1
CVE-2026-1771
High8.8Authenticated (Contributor+) Arbitrary File Upload
≤8.7.3Update to 8.7.4
CVE-2025-68562
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤8.7.22Update to 8.7.23
CVE-2025-62930
Medium6.5Unauthenticated Arbitrary Shortcode Execution
≤8.6.9Update to 8.6.10
CVE-2025-48120
High8.8Authenticated (Contributor+) Arbitrary File Upload
≤8.6.4Update to 8.6.5
CVE-2025-32682
Medium4.3Missing Authorization
≤8.6.4Update to 8.6.5
CVE-2025-32684
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤8.6.6Update to 8.6.7
CVE-2025-32683
Medium6.1Cross-Site Request Forgery
<3.3.0Update to 3.3.0
CVE-2019-1000003

MapSVG – Vector maps, Google Maps, Image maps – with AI assistant: common questions

Does MapSVG – Vector maps, Google Maps, Image maps – with AI assistant have known vulnerabilities?

Yes. VulnCrest Radar lists 20 known vulnerabilities in MapSVG – Vector maps, Google Maps, Image maps – with AI assistant: 8 high, 12 medium. None are known to affect version null.

How do I check which version of MapSVG – Vector maps, Google Maps, Image maps – with AI assistant I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent MapSVG – Vector maps, Google Maps, Image maps – with AI assistant vulnerability?

CVE-2026-123475, published Nov 7, 2026: MapSVG – Vector maps, Google Maps, Image maps – with AI assistant <= 8.16.3 - Missing Authorization. Severity: Medium (CVSS 5.3).

Is any MapSVG – Vector maps, Google Maps, Image maps – with AI assistant vulnerability listed in CISA KEV?

No. None of the known MapSVG – Vector maps, Google Maps, Image maps – with AI assistant vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Jump to

Are you sure?