Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: axelkeller Clear all filters
TI-2025-20121 CVE-2025-27274 · GHSA-3q4v-7rf3-mxgq

WordPress GPX Viewer plugin <= 2.2.11 - Path Traversal vulnerability

Priority LOW 23

Path Traversal: '.../...//' vulnerability in axelkeller GPX Viewer gpx-viewer allows Path Traversal.This issue affects GPX Viewer: from n/a through <= 2.2.11.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00512 Published 2025-03-03 No fix listed CWE-35
TI-2024-09850 CVE-2024-10629 · GHSA-5h2r-67p8-x96r

GPX Viewer <= 2.2.9 - Authenticated (Subscriber+) Arbitrary File Creation

Priority MEDIUM 43

The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxv_file_upload() function in all versions up to, and including, 2.2.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01666 Published 2024-11-13 No fix listed CWE-862