CVE-2026-111398High· 7.7▾ TwilightImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: from n/a through 8.1…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: from n/a through 8.16.1.
mapsvg-lite-interactive-vector-maps <= 8.16.1Update the WordPress MapSVG plugin to the latest available version (at least 8.16.2).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-111406Critical· 9.9WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Upload vulnerability
CVE-2026-111397Medium· 5.3WordPress MapSVG plugin <= 8.16.1 - Sensitive Data Exposure vulnerability
CVE-2026-111405Medium· 6.5WordPress MapSVG plugin <= 8.16.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-111399High· 8.5WordPress MapSVG plugin <= 8.16.1 - SQL Injection vulnerability
CVE-2022-37906Medium· 6.5An authenticated path traversal vulnerability exists in the ArubaOS command line interface
CVE-2024-13986High· 8.8Nagios XI < 2024R1.3.2 contains a remote code execution vulnerability by chaining two flaws: an arbitrary file upload and a path traversal in the Core Config Snapshots interface