← Back

Mapsvg

mapsvg

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Mapsvg Lite
mapsvg_lite
1 CVE
Mapsvg
mapsvg
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-0592
1Mapsvg
1Mapsvg
Jun 17, 2026
May 9, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users.
CVE-2019-1000003
1Mapsvg
1Mapsvg Lite
Jun 17, 2026
Feb 4, 2019
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
MapSVG MapSVG Lite version 3.2.3 contains a Cross Site Request Forgery (CSRF) vulnerability in REST endpoint /wp-admin/admin-ajax.php?action=mapsvg_save that can result in an attacker can modify post data, including embe...Show more
MapSVG MapSVG Lite version 3.2.3 contains a Cross Site Request Forgery (CSRF) vulnerability in REST endpoint /wp-admin/admin-ajax.php?action=mapsvg_save that can result in an attacker can modify post data, including embedding javascript. This attack appears to be exploitable via the victim must be logged in to WordPress as an admin, and click a link. This vulnerability appears to have been fixed in 3.3.0 and later.Show less