Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: PT Norther Lights Production Clear all filters
TI-2026-76306 CVE-2026-111398 · GHSA-4mc9-xccj-988p

Path traversal in WordPress MapSVG plugin allows arbitrary file deletion

Priority LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: fro…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00327 Published 2026-10-19 No fix listed CWE-22
TI-2026-76307 CVE-2026-111406 · GHSA-gj56-vq6p-72q4

Unrestricted file upload in WordPress MapSVG plugin

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a throu…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00326 Published 2026-10-19 No fix listed CWE-434
TI-2026-75304 CVE-2026-111405

Stored cross-site scripting in WordPress MapSVG plugin

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.This issue affects MapSVG: f…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00127 Published 2026-10-16 No fix listed CWE-79
TI-2026-75302 CVE-2026-111399

SQL injection in WordPress MapSVG plugin

Priority LOW 36

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00253 Published 2026-10-16 No fix listed CWE-89
TI-2026-75301 CVE-2026-111397

Missing authorization in WordPress MapSVG plugin exposes data

Priority LOW 29

Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Retrieve Embedded Sensitive Data.This issue affects MapSVG: from n/a through 8.16.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00182 Published 2026-10-16 No fix listed CWE-862