MapSVG

MapSVG has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; 11 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 5 high. 2025 was the busiest year with 9 disclosures.

The most common weakness is SQL Injection, behind 4 of the records (33%). Other recurring categories include Missing Authorization, Unrestricted Upload Of File With Dangerous Type.

11 of the records (92%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

4 independent researchers contributed these findings, most of them (7) reported by Nguyễn Trung Kiên.

Strategic Overview

Avg CVSSMedium

6.6/ 10

Patch Coverage92%

Open

Fixed

Get automatic notifications for all MapSVG vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-9544

MapSVG - All Kinds of Maps and Store Locator for WordPress <= 8.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

12 records


2026-07-23 00:00	MapSVG <= 8.14.0 - Unauthenticated SQL Injection MapSVG <= 8.14.0	`CVE-2026-59526`	7.5 High	Trương Hữu Phúc (truonghuuphuc)	Yes
2026-07-22 00:00	MapSVG <= 8.14.0 - Authenticated (Contributor+) SQL Injection MapSVG <= 8.14.0	`CVE-2026-65451`	6.5 Medium	Trương Hữu Phúc (truonghuuphuc)	Yes
2025-08-08 00:00	MapSVG < 8.7.4 - Unauthenticated SQL Injection MapSVG < 8.7.4	`CVE-2025-54669`	7.5 High	Trương Hữu Phúc (truonghuuphuc)	Yes
2025-07-31 00:00	MapSVG < 8.6.12 - Authenticated (Contributor+) Arbitrary File Download MapSVG < 8.6.12	`CVE-2025-54748`	4.3 Medium	Nguyễn Trung Kiên	Yes
2025-06-12 00:00	MapSVG < 8.7.4 - Authenticated (Contributor+) Arbitrary File Upload MapSVG < 8.7.4	`CVE-2025-47559`	8.8 High	Nguyễn Trung Kiên	Yes
2025-06-09 00:00	MapSVG < 8.6.13 - Authenticated (Contributor+) Privilege Esclation MapSVG < 8.6.13	`CVE-2025-47561`	8.8 High	Nguyễn Trung Kiên	Yes
2025-05-22 00:00	MapSVG <= 8.6.13 - Missing Authorization MapSVG < 8.6.13	`CVE-2025-47558`	5.3 Medium	Nguyễn Trung Kiên	Yes
2025-05-21 21:10	MapSVG - All Kinds of Maps and Store Locator for WordPress <= 8.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting MapSVG <= 8.6.4	`CVE-2024-9544`	6.4 Medium	Mo'men Saad	No
2025-05-16 00:00	MapSVG <= 8.5.31 - Authenticated (Contributor+) Stored Cross-Site Scripting MapSVG <= 8.5.31	`CVE-2025-47557`	6.4 Medium	Nguyễn Trung Kiên	Yes
2025-05-16 00:00	MapSVG < 8.6.13 - Missing Authorization MapSVG < 8.6.13	`CVE-2025-47560`	4.3 Medium	Nguyễn Trung Kiên	Yes

Showing 1–10 of 12 reports