WordPress Gpx2Graphics plugin <= 0.3 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Huynh Kien Minh in WordPress Plugin Gpx2Graphics versions = 0.3...

CVE-2026-81090

The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing attackers to make a logged-in administrator upload arbitrary files such as PHP via a CSRF attack, leading to Remote Code Execution...

CVE-2026-81090

The Gpx2Graphics WordPress plugin (versions ↜ 0.3 ) contains an Arbitrary File Upload vulnerability. The software fails to perform CSRF checks during file uploads and lacks file type validation . This allows an attacker to trick a logged-in administrator into uploading arbitrary files, such as PH...

CVE-2026-81090 Gpx2Graphics <= 0.3 - Arbitrary File Upload via CSRF

The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing attackers to make a logged-in administrator upload arbitrary files such as PHP via a CSRF attack, leading to Remote Code Execution...

EUVD-2026-76783

The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing attackers to make a logged-in administrator upload arbitrary files such as PHP via a CSRF attack, leading to Remote Code Execution...

CVE-2026-81090 Gpx2Graphics <= 0.3 - Arbitrary File Upload via CSRF

The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing attackers to make a logged-in administrator upload arbitrary files such as PHP via a CSRF attack, leading to Remote Code Execution...

CVE-2026-81090: Cross-Site Request Forgery (CSRF)

The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing attackers to make a logged-in administrator upload arbitrary files such as PHP via a CSRF attack, leading to Remote Code Execution...

PT-2026-90566

Name of the Vulnerable Software and Affected Versions Gpx2Graphics WordPress plugin versions prior to 0.4 Description The plugin fails to perform a Cross-Site Request Forgery CSRF check during file upload operations and does not validate the type of uploaded files. This allows an attacker to tric...