Medium · 4.9 CVE-2025-27274 EUVD-2025-5603GHSA-3q4v-7rf3-mxgq

WordPress GPX Viewer plugin <= 2.2.11 - Path Traversal vulnerability

Published Mar 3, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Path Traversal: '.../...//' vulnerability in axelkeller GPX Viewer gpx-viewer allows Path Traversal.This issue affects GPX Viewer: from n/a through <= 2.2.11.

Affected products

Vendor	Product	Affected	Fixed
axelkeller	GPX Viewer	≤ 2.2.11	—

References

https://patchstack.com/database/Wordpress/Plugin/gpx-viewer/vulnerability/wordpress-gpx-viewer-plugin-2-2-11-path-traversal-vulnerability?_s_id=cve vdb-entry