Devfarm - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2024-11-13.

Products

• Wp Gpx Maps - 4 CVEs

Newest CVEs of Devfarm

• CVE-2024-10629 - CVSS 8.8 (high), 2024-11-13: The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the…
• CVE-2024-9028 - CVSS 6.4 (medium), 2024-09-25: The WP GPX Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sgpx' shortcode in all versions up to, and including,…
• CVE-2023-44234 - CVSS 4.3 (medium), 2024-06-12: Missing Authorization vulnerability in Bastianon Massimo WP GPX Map.This issue affects WP GPX Map: from n/a through 1.7.08.
• CVE-2012-6649 - CVSS 9.8 (critical), 2020-01-23: WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.