Approved changes feed: RSS · Atom

cpe:2.3:a:pt_norther_lights_production:mapsvg:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPt Norther Lights Production (ef2c9a81-6de4-5f67-85b8-e499a28800a0)
ProductMapsvg (6ce01f4d-b66e-5834-acf3-faf93b85b5db)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-111406 vulnerable 2026-11-03 10:16:11.599854 WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability
CRITICAL (9.9)
Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1.
Published: 2026-10-19T09:09:18.419Z
Updated: 2026-10-19T16:54:29.679Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-111397 vulnerable 2026-11-03 10:16:11.034298 WordPress MapSVG plugin <= 8.16.1 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Retrieve Embedded Sensitive Data.This issue affects MapSVG: from n/a through 8.16.1.
Published: 2026-10-16T12:29:35.561Z
Updated: 2026-10-16T14:02:23.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-111399 vulnerable 2026-11-03 10:16:11.005714 WordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1.
Published: 2026-10-16T12:30:32.747Z
Updated: 2026-10-16T14:59:31.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-111405 vulnerable 2026-11-03 10:16:10.814734 WordPress MapSVG plugin <= 8.16.1 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.This issue affects MapSVG: from n/a through 8.16.1.
Published: 2026-10-16T12:30:54.361Z
Updated: 2026-10-16T13:46:12.255Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-111398 vulnerable 2026-11-03 10:16:10.591882 WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Deletion vulnerability
HIGH (7.7)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: from n/a through 8.16.1.
Published: 2026-10-19T09:09:19.440Z
Updated: 2026-10-19T17:17:11.133Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47560 vulnerable 2026-06-08 07:27:14.558537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47558 vulnerable 2026-06-08 07:27:14.557872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.