MapSVG – Vector maps, Image maps, Google Maps
MapSVG – Vector maps, Image maps, Google Maps has 14 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; all 14 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 6 high. 2026 was the busiest year with 7 disclosures.
The most common weakness is Cross-Site Scripting, behind 4 of the records (29%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, SQL Injection.
Every one of the 14 issues recorded for MapSVG – Vector maps, Image maps, Google Maps has a vendor fix available, so running the current release closes all known holes.
10 independent researchers contributed these findings, most of them (3) reported by Nguyễn Trung Kiên. MapSVG – Vector maps, Image maps, Google Maps is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-68562MapSVG <= 8.7.3 - Authenticated (Contributor+) Arbitrary File Upload
Read the full analysisVulnerability Records

MapSVG – Vector maps, Image maps, Google Maps
Author
RomanCode
MapSVG is a powerful WordPress mapping plugin that allows you to create interactive vector maps, floor plans, and image maps. Perfect for real estate websites, store locators, seating charts, and more. WP-Admin Demo Key Features (free version) SVG Vector Maps (100+ maps are included in the plugin) Custom SVG files support (upload your own SVG files and turn them into interactive maps) Google Maps Custom overlays on Google Maps Image Maps Floor Plans Store Locator (search by address) Markers (add markers by entering an address) Connect markers to clickable areas on the map (show all locations connected to a specific area in the popover window) Map areas and markers working as links Custom Tooltips, Popovers, Large scrollable modals Database Integration Custom Fields Filters & Search REST API Support MapSVG vs other mapping plugin Below is the comparison of the free version of MapSVG to other popular free mapping plugins on WordPress.org. Unlimited maps MapSVG: Unlimited number of maps Others: 1 map Unlimited locations MapSVG: Unlimited number of markers Others: Limited number of markers Map regions to locations connection MapSVG: Connect markers to map clickable areas. Every area of the map can have one or many markers connected to it. Show the list of connected locations in the popover window. Others: No connection between markers and map clickable areas Internal Database MapSVG: Custom database, with custom fields support Others: You can only use a small set of pre-defined fields, such as title, description and address. Views MapSVG: Show custom fields, as formatted HTML, or show the fully rendered WP Post content – in the Tooltips / Popovers (unique feature of MapSVG) Others: You can only show the coordinates of the marker in a small tooltip Labels MapSVG: Show marker labels (name or address of the location) and region labels (names of countries, states, etc.) Others: No labels MapSVG Premium Features Directory: Display a list of interactive items alongside the map. Custom Overlays: Add custom overlays on Google Maps. Advanced Filters: Enable fulltext search, search by category, zip code, by date. Country-Specific Address Search: Restrict address searches by country. CSV Data Import: Load data seamlessly from CSV files. Image Gallery Module: Showcase images in a lightbox format. Parent/Child Maps: Open an additional map upon clicking a region. Marker Clustering: Group large amount of markers into clusters. Data Source: WordPressCPT: Use WordPress CPTs as a data source. Data Source: Custom API: Use JSON response from your own API as a data source. Code editor: CSS: Edit CSS directly in the map editor, customize the look and feel of the map. Code editor: Handlebars Templates: Get full control over the HTML of the popovers / tooltips / details view. Code editor: JavaScript: Use built-in JavaScript editor for event handling, middleware customization, modify data before it is displayed on the map. Custom Marker Images: Upload your own marker images. Chat Authorization: Store the chat history. Get access to the same chats online any time on mapsvg.com/dashboard. Priority Support: Faster response time in the chat. Purchase Code for Updates: Enable automatic updates from our servers with the purchase code for more frequent updates. One-Click wp-admin Access: Grant support agents quick access to your wp-admin for faster issue resolution.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C