Vendors / Devfarm Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Devfarm records in CISA KEV No Devfarm vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 59
WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.1626 · Published 2020-01-23 · No fix listed CWE-434
Priority LOW 29
The WP GPX Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sgpx' shortcode in all versions up to, and including, 1.7.08 due to insufficient input sanitization and output escaping…
CVSS 3.1 MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00371 · Published 2024-09-25 · No fix listed CWE-79
Priority LOW 20
Missing Authorization vulnerability in Bastianon Massimo WP GPX Map.This issue affects WP GPX Map: from n/a through 1.7.08.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0033 · Published 2024-06-12 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
1 0 2 0 0
