Read the docs

PT Norther Lights Production

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

PT Norther Lights Production records in CISA KEV

No PT Norther Lights Production vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-76307 CVE-2026-111406 · GHSA-gj56-vq6p-72q4

Unrestricted file upload in WordPress MapSVG plugin

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a throu…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00326 Published 2026-10-19 No fix listed CWE-434
TI-2026-75302 CVE-2026-111399

SQL injection in WordPress MapSVG plugin

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00253 Published 2026-10-16 No fix listed CWE-89
TI-2026-76306 CVE-2026-111398 · GHSA-4mc9-xccj-988p

Path traversal in WordPress MapSVG plugin allows arbitrary file deletion

Priority LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: fro…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00327 Published 2026-10-19 No fix listed CWE-22
TI-2026-75301 CVE-2026-111397

Missing authorization in WordPress MapSVG plugin exposes data

Priority LOW 29

Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Retrieve Embedded Sensitive Data.This issue affects MapSVG: from n/a through 8.16.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00182 Published 2026-10-16 No fix listed CWE-862
TI-2026-75304 CVE-2026-111405

Stored cross-site scripting in WordPress MapSVG plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.This issue affects MapSVG: f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00127 Published 2026-10-16 No fix listed CWE-79
Open these records in search →