CVE-2026-111397: WordPress MapSVG plugin <= 8.16.1 - Sensitive Data Exposure vulnerability
Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Retrieve Embedded Sensitive Data.This issue affects MapSVG: from n/a through 8.16.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress MapSVG pluginto a version that resolves this vulnerability.Fixed in 8.16.2
Event History
Frequently Asked Questions
Who can exploit this issue?
The vulnerability is remotely exploitable with no authentication or user interaction required. An attacker can retrieve embedded sensitive data because authorization is missing.
What installations are affected?
MapSVG versions through 8.16.1 are affected. The available information does not identify a configuration prerequisite or indicate that any particular setup is excluded.
What is the impact if exploitation succeeds?
Successful exploitation can expose embedded sensitive data. The reported CVSS vector indicates confidentiality impact only; no integrity or availability impact is identified.