Security Advisory

CVE-2026-81090

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-12 06:00:08

Last updated 2026-09-12 15:34:07

Assigner WPScan

CVSS score 7.2

State PUBLISHED

Description

The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing attackers to make a logged-in administrator upload arbitrary files such as PHP via a CSRF attack, leading to Remote Code Execution.

← Browse all CVEs View on cve.org ↗