RomanCode vulnerabilities
Published CVEs affecting RomanCode products: 8 record(s), with severity, exploitation and fixes.
CVE-2026-59527
Critical · 9.3
CWE-89 Jul 27, 2026
WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.
CVE-2026-65451
High · 8.5
CWE-89 Jul 23, 2026
WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
Contributor SQL Injection in MapSVG <= 8.14.0 versions.
CVE-2026-65450
High · 8.5
CWE-89 Jul 23, 2026
WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
Contributor SQL Injection in MapSVG <= 8.14.0 versions.
CVE-2026-65449
Medium · 6.5
CWE-79 Jul 23, 2026
WordPress MapSVG plugin <= 8.14.0 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in MapSVG <= 8.14.0 versions.
CVE-2026-59526
Critical · 9.3
CWE-89 Jul 23, 2026
WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability
Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.
CVE-2025-68562
Critical · 9.9
CWE-434 Dec 29, 2025
WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.7.3.
CVE-2025-54748
Medium · 6.5
CWE-22 Dec 18, 2025
WordPress MapSVG Plugin < 8.6.12 - Arbitrary File Download Vulnerability
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RomanCode MapSVG mapsvg allows Path Traversal.This issue affects MapSVG: from n/a through < 8.6.12.
CVE-2025-62930
Medium · 6.5
CWE-79 Oct 26, 2025
WordPress MapSVG plugin <= 8.7.22 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RomanCode MapSVG mapsvg-lite-interactive-vector-maps allows DOM-Based XSS.This issue affects MapSVG: from n/a through <= 8.7.22.