High · 7.5 CVE-2026-123475 EUVD-2026-119984GHSA-mjwv-q768-pf3j

WordPress MapSVG plugin <= 8.16.3 - Broken Access Control vulnerability

Published Nov 9, 2026 · Updated Nov 9, 2026 · Assigned by Patchstack

Vendor: PT Norther Lights Production Product: MapSVG

Description

Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through 8.16.3.

Affected products

Vendor	Product	Affected	Fixed
PT Norther Lights Production	MapSVG	≤ 8.16.3	—

References

https://patchstack.com/database/wordpress/plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-plugin-8-16-3-broken-access-control-vulnerability?_s_id=cve vdb-entry