CVE-2012-10018: Mapplic

High severity, CVSS 8.3. EPSS: 1.2% chance of exploitation in the next 30 days.

The Mapplic and Mapplic Lite plugins for WordPress are vulnerable to Server-Side Request Forgery in versions up to, and including 6.1, 1.0 respectively. This makes it possible for attackers to forgery requests coming from a vulnerable site's server and ultimately perform an XSS attack if requesting an SVG file.

Affected products

• Mapplic Mapplic: up to and including 1.0; up to and including 6.1

Published 2024-10-16. Last modified 2026-06-16.