A Cross Site Scripting (XSS) vulnerability exists in the WordPress MapSVG plugin versions up to 8.16.1. This issue allows for Stored XSS, potentially impacting users who interact with affected maps. The vulnerability is caused by improper neutralization of input during web page generation. Defenders responsible for WordPress installations using the MapSVG plugin should assess exposure and prioritize updat [truncated]
HIGHPT Norther Lights ProductionCVE published 2026-10-16
This debrief provides an analysis of CVE-2026-111399, a SQL Injection vulnerability in the WordPress MapSVG plugin. The vulnerability has a CVSS score of 8.5 and is considered high severity. It affects the MapSVG plugin versions up to 8.16.1. The vulnerability allows an attacker to inject malicious SQL code, potentially leading to data breaches or other security issues. Defenders should assess exposure an [truncated]
MEDIUMPT Norther Lights ProductionCVE published 2026-10-16
The CVE-2026-111397 vulnerability in the WordPress MapSVG plugin allows for sensitive data exposure due to a missing authorization issue. This issue affects the MapSVG plugin from version n/a through 8.16.1. The vulnerability has a CVSS score of 5.3 and a severity of MEDIUM. Defenders should assess their exposure, verify the plugin version in use, review systems for potential exposure of sensitive data, a [truncated]
