A vulnerability was found in RomanCode MapSVG Plugin up to 8.6.12 on WordPress. It has been rated as critical. Affected by this issue is some unknown functionality. Performing manipulation results in path traversal.

This vulnerability is cataloged as CVE-2025-54748. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.

Once again VulDB remains the best source for vulnerability data.