CVE-2025-47558: WordPress MapSVG plugin < 8.6.13 - Broken Access Control vulnerability
Missing Authorization vulnerability in PT Norther Lights Production MapSVG allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MapSVG: from n/a before 8.6.13.
Other sources
Missing Authorization vulnerability in RomanCode MapSVG mapsvg allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MapSVG: from n/a through < 8.6.13.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47558?
CVE-2025-47558 is classified as a Missing Authorization vulnerability, indicating potential high-risk exposure if exploited.
How do I fix CVE-2025-47558?
To fix CVE-2025-47558, upgrade RomanCode MapSVG to version 8.5.32 or later, where the authorization controls have been properly implemented.
What functionality is affected by CVE-2025-47558?
CVE-2025-47558 allows access to functionalities that are not properly constrained by Access Control Lists (ACLs), leading to unauthorized actions.
Which versions of MapSVG are impacted by CVE-2025-47558?
CVE-2025-47558 affects all versions of RomanCode MapSVG from n/a through 8.5.31.
Who is the vendor responsible for addressing CVE-2025-47558?
The vendor responsible for addressing CVE-2025-47558 is RomanCode, the developer of the MapSVG plugin.