amCharts: Charts and Maps

amCharts: Charts and Maps has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for amCharts: Charts and Maps has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. amCharts: Charts and Maps is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.0.

Strategic Overview

Avg CVSSMedium

6.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all amCharts: Charts and Maps vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2022-36405

amCharts: Charts and Maps <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2024-09-11 00:00	amCharts: Charts and Maps <= 1.4.4 - Reflected Cross-Site Scripting via Cross-Site Request Forgery amCharts <= 1.4.4	`CVE-2024-8622`	6.1 Medium	Krzysztof Zając	Yes
2022-08-09 00:00	amCharts: Charts and Maps <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting amCharts <= 1.4	`CVE-2022-36405`	6.4 Medium	Ngo Van Thien	Yes

Showing 1–2 of 2 reports

Latestv1.4.7

amCharts: Charts and Maps

Author

martynasma

5.0(29)

100/100

Last Updated

2026-08-18 (26d ago)

Active Installs

2,000+

Downloads

109,000

Requires WP

3.5+

Requires PHP

Tested up to

WP 7.1.0

Created

2014-02-28 (13y ago)

Important disclaimer This plugin loads JavaScript libraries from external amCharts CDN which is a free service provided by amCharts. amCharts provides their libraries completely free without any caps to functionality on a sole condition, that small contribution is automatically displayed on all chart produced by amCharts library. The contribution comes from amCharts libraries/service and is not added by this plugin. Related links: * Free usage terms / license of the amCharts library * amCharts privacy policy What is it? Ever tried getting JavaScript content into your WordPress posts or pages? Yeah, that’s impossible. WP strips down all the JavaScript. This makes adding JavaScript Charts and Maps a hassle. Developed and maintained by amCharts staff, this plugin solves the problem by allowing you to create chart code snippets, that then subsequently can be inserted into the posts or pages as a shortcode. (helpful button in TinyMCE is also there) You can also use a built-in PHP function to invoke the chart anywhere in your template: <?php amcharts_insert( $chart_id ); ?> The plugin has also many helpful functions: Easy switching between CDN-hosted or local chart/map libraries storage Setting defaults per chart type Automatically locating installed libraries and available resources

View on WordPress.org