CVE

CVE-2022-0592

9.8

CVSS

Description

The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users.

Attack Vector

Privileges Req.

User Interaction

mapsvg

Updated Oct 24, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~1 minutes

CVE-2022-0592 Scanner

Targets the REST API endpoint in MapSVG versions before 6.2.20, allowing unauthenticated attackers to execute arbitrary SQL commands on the database.

Used 2.6k times · 3.4k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: mapsvg

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →