WordPress MapSVG Plugin Code Injection Vulnerability

A code injection vulnerability has been identified in the WordPress MapSVG plugin, affecting versions through 8.5.34. This vulnerability allows for improper control over code generation, enabling malicious actors to inject content into pages and posts. Such an injection could be exploited to introduce phishing pages or other harmful content.

Impact

Exploitation of this vulnerability could lead to unauthorized content injection, allowing attackers to manipulate website pages and posts. This could be used to inject phishing content or other malicious material, potentially deceiving users or causing harm to the website's reputation.