WordPress plugin
WP GPX Maps – GPX, FIT & KML maps with elevation profile security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium2
- Low0
All WP GPX Maps – GPX, FIT & KML maps with elevation profile vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via sgpx Shortcode ≤1.7.08Update to 1.7.10 | CVE-2024-9028 | |
| Medium4.3 | Missing Authorization ≤1.7.05Update to 1.7.06 | CVE-2023-44234 | |
| Critical9.8 | Arbitrary File Upload <1.1.23Update to 1.1.23 | CVE-2012-6649 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via sgpx Shortcode
≤1.7.08Update to 1.7.10
- Medium4.3Missing Authorization
≤1.7.05Update to 1.7.06
- Critical9.8Arbitrary File Upload
<1.1.23Update to 1.1.23
WP GPX Maps – GPX, FIT & KML maps with elevation profile: common questions
Does WP GPX Maps – GPX, FIT & KML maps with elevation profile have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in WP GPX Maps – GPX, FIT & KML maps with elevation profile: 1 critical, 2 medium. None are known to affect version null.
How do I check which version of WP GPX Maps – GPX, FIT & KML maps with elevation profile I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP GPX Maps – GPX, FIT & KML maps with elevation profile vulnerability?
CVE-2024-9028, published Sep 24, 2024: WP GPX Maps <= 1.7.08 - Authenticated (Contributor+) Stored Cross-Site Scripting via sgpx Shortcode. Severity: Medium (CVSS 6.4).
Is any WP GPX Maps – GPX, FIT & KML maps with elevation profile vulnerability listed in CISA KEV?
No. None of the known WP GPX Maps – GPX, FIT & KML maps with elevation profile vulnerabilities is currently listed in the CISA KEV catalog.