| Package | Affected versions | Patched versions |
|---|---|---|
| mapplic | ≤ 1.0≤ 6.1 |
The Mapplic and Mapplic Lite plugins for WordPress are vulnerable to Server-Side Request Forgery in versions up to, and including 6.1, 1.0 respectively. This makes it possible for attackers to forgery requests coming from a vulnerable site's server and ultimately perform an XSS attack if requesting an SVG file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free