CVE-2026-59527

CriticalCVSS 9.3

Published: 27/07/2026(UTC)Updated: 27/07/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Summary

The MapSVG plugin version 8.14.0 and earlier contains an SQL injection vulnerability exploitable by an unauthenticated attacker.

An attacker could steal or modify data from the WordPress database, potentially leading to site takeover.

Update the MapSVG plugin to the latest available version.

Original NVD description (English source)

Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.