All vulnerabilities

WordPress plugins

CVE-2026-111406

WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability

Severity
Critical 9.9
Published
19 Oct 2026
Last changed
19 Oct 2026
Added to UpHeron
19 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Mapsvg Lite Interactive Vector Maps (WordPress plugin)WordPress plugins · wp-plugin:mapsvg-lite-interactive-vector-maps
  • Every version up to 8.16.1

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-111406