Known vulnerabilities in MapSVG – Vector maps, Image maps, Google Maps

Create interactive vector maps, floor plans, and image maps. Support for Google Maps integration, custom markers, tooltips, and popups.

13Reported vulnerabilities

8.8Highest CVSS score

8.15.0Latest version

1,000+Active installs

What to do now

Update MapSVG – Vector maps, Image maps, Google Maps to 8.14.1 or later. 13 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 17, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2025-68562	High 8.8	0.4%	8.7.3 and earlier	`8.7.4`	December 24, 2025
CVE-2025-32682	High 8.8	0.5%	8.6.4 and earlier	`8.6.5`	April 15, 2025
CVE-2026-59527	High 7.5	0.2%	8.14.0 and earlier	`8.14.1`	July 23, 2026
CVE-2026-1771	High 7.2	1.1%	0 to 8.14.0 (inclusive)	`8.14.1`	July 21, 2026
CVE-2026-65455	High 7.2	0.5%	8.14.0 and earlier	`8.14.1`	July 22, 2026
CVE-2026-65450	Medium 6.5	0.4%	8.14.0 and earlier	`8.14.1`	July 22, 2026
CVE-2025-48120	Medium 6.5	0.3%	8.6.9 and earlier	`8.6.10`	May 16, 2025
CVE-2025-32683	Medium 6.4	0.3%	8.6.6 and earlier	`8.6.7`	April 9, 2025
CVE-2025-9205	Medium 6.4	0.2%	0 to 8.14.0 (inclusive)	`8.14.1`	July 24, 2026
CVE-2026-65449	Medium 6.4	0.2%	8.14.0 and earlier	`8.14.1`	July 22, 2026
CVE-2025-62930	Medium 6.4	0.2%	8.7.22 and earlier	`8.7.23`	October 6, 2025
CVE-2019-1000003	Medium 6.1	0.8%	Before 3.3.0	`3.3.0`	January 8, 2019
CVE-2025-32684	Medium 4.3	0.4%	8.6.4 and earlier	`8.6.5`	April 9, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.