CVE-2025-54669: WordPress MapSVG Plugin < 8.7.4 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RomanCode MapSVG allows SQL Injection. This issue affects MapSVG: from n/a through n/a.
Other sources
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RomanCode MapSVG mapsvg allows SQL Injection.This issue affects MapSVG: from n/a through < 8.7.4.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54669?
CVE-2025-54669 is classified as a significant SQL Injection vulnerability affecting the MapSVG plugin.
How do I fix CVE-2025-54669?
To fix CVE-2025-54669, ensure that you update the MapSVG plugin to the latest secure version.
Which versions of MapSVG are affected by CVE-2025-54669?
CVE-2025-54669 affects all versions of the MapSVG plugin up to and including 8.7.4.
What types of attacks can be performed due to CVE-2025-54669?
CVE-2025-54669 allows attackers to exploit SQL Injection, potentially gaining unauthorized access to the database.
Who is the vendor of the affected product for CVE-2025-54669?
CVE-2025-54669 affects products developed by both WordPress and RomanCode.