File and Path Handling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. WordPress MapSVG Lite plugin <= 8.6.4 - Arbitrary File Upload VulnerabilityCVE-2025-32682RomanCode · CVSS 9.9 · 0.6% likely

   CWE-434

2. WordPress MapSVG plugin < 8.7.4 - Arbitrary File Upload vulnerabilityCVE-2025-47559RomanCode · CVSS 9.9 · 0.6% likely

   CWE-434

3. WordPress MapSVG plugin <= 8.7.3 - Arbitrary File Upload vulnerabilityCVE-2025-68562RomanCode · CVSS 9.9 · 0.4% likely

   CWE-434

4. WordPress MapSVG Plugin < 8.6.12 - Arbitrary File Download VulnerabilityCVE-2025-54748RomanCode · CVSS 6.5 · 0.4% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.