CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2025-27274

WordPress GPX Viewer plugin <= 2.2.11 - Path Traversal vulnerability

Status: Published
Published: 2025-03-03
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Path Traversal: '.../...//' vulnerability in axelkeller GPX Viewer gpx-viewer allows Path Traversal.This issue affects GPX Viewer: from n/a through <= 2.2.11.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

axelkeller GPX Viewer

Default version status: unaffected

0 to ≤ 2.2.11affected

References

https://patchstack.com/database/Wordpress/Plugin/gpx-viewer/vulnerability/wordpress-gpx-viewer-plugin-2-2-11-path-traversal-vulnerability?_s_id=cve ↗