CVE-2026-59526

CriticalCVSS 9.3

Published: 23/07/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Summary

The MapSVG plugin versions up to 8.14.0 are vulnerable to unauthenticated SQL injection.

An unauthenticated attacker can execute arbitrary SQL queries, potentially leading to data leakage or modification.

It is recommended to update the MapSVG plugin to a version later than 8.14.0.

Original NVD description (English source)

Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.