CVE-2026-111406

9.9 CRITICAL

Published 2026-10-19 · Updated 2026-10-19

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.This issue affects MapSVG: from n/a through 8.16.1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-434

All references

https://patchstack.com/database/wordpress/plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-plugin-8-16-1-arbitrary-file-upload-vulnerability?_s_id=cve

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2023-54405PoC
HIGHCVE-2025-15700
HIGHCVE-2026-100389
MEDIUMCVE-2026-101071PoC
HIGHCVE-2026-102130PoC
MEDIUMCVE-2026-102137PoC
HIGHCVE-2026-102143PoC
MEDIUMCVE-2026-102263

Related by shared AI tags and CWE weakness class. Browse the full archive.