RomanCode vulnerabilities and threats

14 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.4%	CVE-2026-59527MapSVG (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-07-27CVE Database V5CVE-2026-59527 Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. EPSS 0.4%Vulnerability RomanCode CWE-89	CVE Database V5	2026-07-27
High	8.5	EPSS 0.4%	CVE-2026-65451MapSVG (WordPress plugin) · SQL Injection High8.5EPSS 0.4%2026-07-23CVE Database V5CVE-2026-65451 Contributor SQL Injection in MapSVG <= 8.14.0 versions. EPSS 0.4%Vulnerability RomanCode CWE-89	CVE Database V5	2026-07-23
High	8.5	EPSS 0.4%	CVE-2026-65450MapSVG (WordPress plugin) · SQL Injection High8.5EPSS 0.4%2026-07-23CVE Database V5CVE-2026-65450 Contributor SQL Injection in MapSVG <= 8.14.0 versions. EPSS 0.4%Vulnerability RomanCode CWE-89	CVE Database V5	2026-07-23
Medium	6.5	EPSS 0.2%	CVE-2026-65449MapSVG (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-07-23CVE Database V5CVE-2026-65449 Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions. EPSS 0.2%Vulnerability RomanCode CWE-79	CVE Database V5	2026-07-23
Critical	9.3	EPSS 0.4%	CVE-2026-59526MapSVG (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-07-23CVE Database V5CVE-2026-59526 Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions. EPSS 0.4%Vulnerability RomanCode CWE-89	CVE Database V5	2026-07-23
Critical	9.9	EPSS 0.4%	CVE-2025-68562MapSVG (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.4%2025-12-29CVE Database V5CVE-2025-68562 Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3. EPSS 0.4%Vulnerability RomanCode CWE-434	CVE Database V5	2025-12-29
Medium	6.5	EPSS 0.4%	CVE-2025-54748MapSVG (WordPress plugin) · Path Traversal Medium6.5EPSS 0.4%2025-12-18CVE Database V5CVE-2025-54748 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RomanCode MapSVG mapsvg allows Path Traversal.This issue affects MapSVG: from n/a through < 8.6.12. EPSS 0.4%Vulnerability RomanCode	CVE Database V5	2025-12-18
Medium	6.5	EPSS 0.2%	CVE-2025-62930MapSVG (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-10-27CVE Database V5CVE-2025-62930 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through <= 8.7.22. EPSS 0.2%Vulnerability RomanCode	CVE Database V5	2025-10-27
Critical	9.3	EPSS 0.3%	CVE-2025-54669MapSVG (WordPress plugin) · SQL Injection Critical9.3EPSS 0.3%2025-08-14CVE Database V5CVE-2025-54669 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RomanCode MapSVG mapsvg allows SQL Injection.This issue affects MapSVG: from n/a through < 8.7.4. EPSS 0.3%Vulnerability RomanCode	CVE Database V5	2025-08-14
Critical	9.9	EPSS 0.6%	CVE-2025-47559MapSVG (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.6%2025-06-17CVE Database V5CVE-2025-47559 Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through < 8.7.4. EPSS 0.6%Vulnerability RomanCode	CVE Database V5	2025-06-17
High	8.8	EPSS 0.4%	CVE-2025-47561MapSVG (WordPress plugin) · Incorrect Privilege Assignment High8.8EPSS 0.4%2025-06-09CVE Database V5CVE-2025-47561 Incorrect Privilege Assignment vulnerability in RomanCode MapSVG mapsvg allows Privilege Escalation.This issue affects MapSVG: from n/a through < 8.6.13. EPSS 0.4%Vulnerability RomanCode	CVE Database V5	2025-06-09
Critical	9.9	EPSS 0.6%	CVE-2025-32682MapSVG (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.6%2025-04-17CVE Database V5CVE-2025-32682 Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through <= 8.6.4. EPSS 0.6%Vulnerability RomanCode	CVE Database V5	2025-04-17
Medium	6.5	EPSS 0.3%	CVE-2025-32683MapSVG (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2025-04-09CVE Database V5CVE-2025-32683 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through <= 8.6.6. EPSS 0.3%Vulnerability RomanCode	CVE Database V5	2025-04-09
Medium	5.0	EPSS 0.4%	CVE-2025-32684MapSVG (WordPress plugin) · Missing Authorization Medium5.0EPSS 0.4%2025-04-09CVE Database V5CVE-2025-32684 Missing Authorization vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through <= 8.6.4. EPSS 0.4%Vulnerability RomanCode	CVE Database V5	2025-04-09

Page 1 of 1