CVE-2026-111399
CVE-2026-111399 · WordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1.
CVSS 8.5 · High · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
mapsvg
- Versions
- ≥ 0, ≤ 8.16.1: Affected; ≥ 8.16.2: Not affected (custom)
Update to 8.16.2