Vulnerabilities / WP GPX Maps
WP GPX Maps vulnerabilities
Advisories WPSec published for WP GPX Maps. Other sources may list more. Its attack surface: WP GPX Maps on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-27 | WPSEC-2026-1770 | WP GPX Maps <= 1.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'nggalleries' and 'ngimages' Shortcode Attributes | Medium 6.4 | 1.8.00 |
| 2026-10-27 | WPSEC-2026-1769 | WP GPX Maps <= 1.7.11 - Cross-Site Request Forgery to GPX File Upload | Medium 4.3 | 1.8.00 |
| 2026-10-27 | WPSEC-2026-1768 | WP GPX Maps <= 1.7.11 - Authenticated (Contributor+) Path Traversal via 'gpx' and 'folder' Shortcode Attributes | Medium 4.3 | 1.8.00 |
| 2026-10-27 | WPSEC-2026-1767 | WP GPX Maps <= 1.7.11 - Unauthenticated Reflected Cross-Site Scripting via 'nggalleries' and 'ngimages' Parameters | Medium 6.1 | 1.8.00 |
License: CC BY 4.0