EUVD-2024-49673

Malicious code in bioql PyPI...

CVE-2024-9028

The WP GPX Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sgpx' shortcode in all versions up to, and including, 1.7.08 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-9028

CVE-2024-9028 : WP GPX Maps for WordPress is affected by a Stored XSS via the sgpx shortcode in all versions up to 1.7.08. The issue stems from insufficient input sanitization and output escaping of user-supplied attributes, allowing authenticated attackers (Contributor+ with access) to inject sc...

CVE-2024-9028: Improper Neutralization of Input During Web Page Generation

The WP GPX Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sgpx' shortcode in all versions up to, and including, 1.7.08 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2012-6649

The CVE-2012-6649 affects WordPress WP GPX Maps Plugin 1.1.21 and is caused by an improper/unrestricted file upload, enabling remote attackers to execute arbitrary PHP code on the server. Impact: remote code execution with web‑server context; vulnerability is tied to the wp-gpx-maps plugin. Remed...

PT-2020-7318

Name of the Vulnerable Software and Affected Versions: WordPress WP GPX Maps Plugin version 1.1.21 Description: The issue allows remote attackers to execute arbitrary PHP code via improper file upload. Recommendations: For WordPress WP GPX Maps Plugin version 1.1.21, update to a version that fixe...

CVE-2012-6649: Unrestricted Upload of File with Dangerous Type

WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload...