CVE-2026-59527

Unauthenticated SQL Injection in MapSVG <= 8.14.0 versions.

Credits

Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/mapsvg-lite-interactive-vector-maps/vulnerability/wordpress-mapsvg-plugin-8-14-0-sql-injection-vulnerability-4?_s_id=cve