WordPress plugin GPX Viewer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-10629

The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxvfileupload function in all versions up to, and including, 2.2.9. This makes it possible for authenticated attackers, with subscriber-level access and...

CVE-2024-10629

The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxvfileupload function in all versions up to, and including, 2.2.9. This makes it possible for authenticated attackers, with subscriber-level access and...

CVE-2024-10629 GPX Viewer <= 2.2.9 - Authenticated (Subscriber+) Arbitrary File Creation

The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxvfileupload function in all versions up to, and including, 2.2.9. This makes it possible for authenticated attackers, with subscriber-level access and...

CVE-2024-10629

CVE-2024-10629 affects the GPX Viewer WordPress plugin (versions up to 2.2.8; later references show 2.2.9 patch). The vulnerability is arbitrary file creation due to missing capability checks and file type validation in gpxv_file_upload(). Authenticated attackers with subscriber-level access or h...

WordPress plugin GPX Viewer 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress GPX Viewer plugin <= 2.2.9 - Authenticated (Subscriber+) Arbitrary File Creation vulnerability

Authenticated Subscriber+ Arbitrary File Creation vulnerability discovered by Francesco Carlucci in WordPress Plugin GPX Viewer versions = 2.2.9...

Exploit for CVE-2024-10629

CVE-2024-10629 GPX Viewer = 2.2.8 - Authenticated Subscri...

WordPress GPX Viewer Plugin <= 2.2.9 is vulnerable to Arbitrary File Upload

Software GPX Viewer Type Plugin Vulnerable versions = 2.2.9 Fixed in 2.2.10 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-10629 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID abb72626a6f6 Credits Francesco Carlucci Required privilege...

GPX Viewer - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application GPX Viewer published at the 'play' market has multiple vulnerabilities...