WordSec
WordSec

MapSVG – Vector maps, Image maps, Google Maps

Explore MapSVG – Vector maps, Image maps, Google Maps vulnerabilities across all versions. Currently tracking 13 known vulnerabilities, including severity, impact, and patch status.

01234567891008.01.2019Today08.01.20196.1MapSVG Lite < 3.3.0 - Cross-Site Request Forgery CVSS 6.1 · 08.01.201909.04.20256.4MapSVG Lite <= 8.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 09.04.20254.3MapSVG Lite <= 8.6.4 - Missing Authorization CVSS 4.3 · 09.04.202515.04.20258.8MapSVG Lite <= 8.6.4 - Authenticated (Contributor+) Arbitrary File Upload CVSS 8.8 · 15.04.202516.05.20256.5MapSVG Lite <= 8.6.9 - Unauthenticated Arbitrary Shortcode Execution CVSS 6.5 · 16.05.202506.10.20256.4MapSVG <= 8.7.23 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 06.10.202524.12.20258.8MapSVG <= 8.7.3 - Authenticated (Contributor+) Arbitrary File Upload CVSS 8.8 · 24.12.202520.07.20267.2MapSVG <= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload via '/mapsvg/v1/svgfile' Endpoint CVSS 7.2 · 20.07.202622.07.20266.5MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Contributor+) SQL Injection CVSS 6.5 · 22.07.20267.2MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Admin+) Arbitrary File Upload CVSS 7.2 · 22.07.20266.4MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 22.07.202623.07.20267.5MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Unauthenticated SQL Injection CVSS 7.5 · 23.07.20266.4MapSVG Lite <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 23.07.2026

Strategic Overview

Avg CVSSMedium
6.8/ 10
Patch Coverage100%
Open

0

Fixed

13

Get automatic notifications for all MapSVG – Vector maps, Image maps, Google Maps vulnerabilities before they are exploited.

Vulnerability Records

13 records
2026-07-23 14:29
MapSVG Lite <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
MapSVG
<= 8.14.0
CVE-2025-9205
6.4
Medium
zer0gh0stYes
2026-07-23 00:00
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Unauthenticated SQL Injection
MapSVG
<= 8.14.0
CVE-2026-59527
7.5
High
Trương Hữu Phúc (truonghuuphuc)Yes
2026-07-22 00:00
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Contributor+) SQL Injection
MapSVG
<= 8.14.0
CVE-2026-65450
6.5
Medium
Trương Hữu Phúc (truonghuuphuc)Yes
2026-07-22 00:00
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Admin+) Arbitrary File Upload
MapSVG
<= 8.14.0
CVE-2026-65455
7.2
High
Securepeak Research TeamYes
2026-07-22 00:00
MapSVG – Vector maps, Image maps, Google Maps <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
MapSVG
<= 8.14.0
CVE-2026-65449
6.4
Medium
johskaYes
2026-07-20 19:29
MapSVG <= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload via '/mapsvg/v1/svgfile' Endpoint
MapSVG
<= 8.14.0
CVE-2026-1771
7.2
High
san6051Yes
2025-12-24 00:00
MapSVG <= 8.7.3 - Authenticated (Contributor+) Arbitrary File Upload
MapSVG
<= 8.7.3
CVE-2025-68562
8.8
High
stealthcopterYes
2025-10-06 00:00
MapSVG <= 8.7.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
MapSVG
<= 8.7.22
CVE-2025-62930
6.4
Medium
Gilang Asra Bilhadi - DJYes
2025-05-16 00:00
MapSVG Lite <= 8.6.9 - Unauthenticated Arbitrary Shortcode Execution
MapSVG
<= 8.6.9
CVE-2025-48120
6.5
Medium
Trương Hữu Phúc (truonghuuphuc)Yes
2025-04-15 00:00
MapSVG Lite <= 8.6.4 - Authenticated (Contributor+) Arbitrary File Upload
MapSVG
<= 8.6.4
CVE-2025-32682
8.8
High
Nguyễn Trung KiênYes
Showing 1–10 of 13 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C