Vulnerabilities

TI-2024-08381 CVE-2024-9028 · GHSA-8mxg-6836-hfxw

WP GPX Maps <= 1.7.08 - Authenticated (Contributor+) Stored Cross-Site Scripting via sgpx Shortcode

LOW 29

The WP GPX Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sgpx' shortcode in all versions up to, and including, 1.7.08 due to insufficient input sanitization and output escaping…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00371 Published 2024-09-25 No fix listed CWE-79

TI-2023-23760 CVE-2023-44234 · GHSA-w9f6-jf9g-658h

WordPress WP GPX Maps plugin <= 1.7.08 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Bastianon Massimo WP GPX Map.This issue affects WP GPX Map: from n/a through 1.7.08.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0033 Published 2024-06-12 No fix listed CWE-862

TI-2012-05367 CVE-2012-6649 · GHSA-fjpw-8fm2-p7m6

WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.

MEDIUM 59

WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1626 Published 2020-01-23 No fix listed CWE-434

Vulnerabilities

Filters

WP GPX Maps <= 1.7.08 - Authenticated (Contributor+) Stored Cross-Site Scripting via sgpx Shortcode

WordPress WP GPX Maps plugin <= 1.7.08 - Broken Access Control vulnerability

WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.