SVG Map by Smjrifle

SVG Map by Smjrifle has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for SVG Map by Smjrifle has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by dayea song. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all SVG Map by Smjrifle vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-13519

SVG Map Plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2026-01-06 19:40	SVG Map Plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update and Stored Cross-Site Scripting SVG Map by Smjrifle <= 1.0.0	`CVE-2025-13519`	6.1 Medium	dayea song	No

Showing 1–1 of 1 reports

Latestv1.0.3

SVG Map by Smjrifle

Author

smjrifle

0.0(0)

0/100

Last Updated

2026-04-04 (5mo ago)

Active Installs

Downloads

1,460

Requires WP

5.8+

Requires PHP

8.0+

Tested up to

WP 6.9.7

Created

2018-03-10 (9y ago)

SVG Map by Smjrifle allows you to display an interactive SVG map with clickable points. Administrators can select points from the map and assign popup descriptions that appear on hover. Originally developed under Saedi Works, this plugin is now independently maintained and actively improved by Smjrifle. Features include: Interactive SVG map Clickable location points Admin-managed popup descriptions Popup descriptions on hover Shortcode integration Secure AJAX handling Security hardened architecture

View on WordPress.org