WP GPX Map < 1.7.06 - Missing Authorization

2023-11-2300:00:00

wpscan.com

wordpress

gpx map

unauthorized modification

missing capability check

data vulnerability

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The WP GPX Map plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpgpxmaps_dismiss_notice() function in versions up to, and including, 1.7.05. This makes it possible for authenticated attackers, with subscriber-level access and above, to dismiss plugin notices.