PT Norther Lights Production MapSVG vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting PT Norther Lights Production MapSVG: 5 record(s), with affected versions and fixes.

CVE-2026-111406 Critical · 9.9 CWE-434 Oct 19, 2026

WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1.

CVE-2026-111398 High · 7.7 CWE-22 Oct 19, 2026

WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: from n/a through 8.16.1.

CVE-2026-111405 Medium · 6.5 CWE-79 Oct 16, 2026

WordPress MapSVG plugin <= 8.16.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.This issue affects MapSVG: from n/a through 8.16.1.

CVE-2026-111399 High · 8.5 CWE-89 Oct 16, 2026

WordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1.

CVE-2026-111397 Medium · 5.3 CWE-862 Oct 16, 2026

WordPress MapSVG plugin <= 8.16.1 - Sensitive Data Exposure vulnerability

Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Retrieve Embedded Sensitive Data.This issue affects MapSVG: from n/a through 8.16.1.