CVE-2026-111406
CVE-2026-111406 · WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1.
CVSS 9.9 · Critical · EPSS 0.4% · Fix available
- Published
- Updated
Affected products and versions
mapsvg
- Versions
- ≥ 0, ≤ 8.16.1: Affected; ≥ 8.16.2: Not affected (custom)
Update to 8.16.2