Gps Plotter

Gps Plotter has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Gps Plotter has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2023.

All of these findings were reported by Yuki Haruma. Gps Plotter is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

4.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Gps Plotter vulnerabilities before they are exploited.

Most severe open issueCVSS 4.4CVE-2023-30874

GPS Plotter <= 5.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2023-04-21 00:00	GPS Plotter <= 5.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Gps Plotter <= 5.3.0	`CVE-2023-30874`	4.4 Medium	Yuki Haruma	No

Showing 1–1 of 1 reports

Latestv5.4.0

Gps Plotter

Author

Steve Curtis

4.5(10)

90/100

Last Updated

2026-04-20 (5mo ago)

Active Installs

80+

Downloads

10,206

Requires WP

4.0+

Requires PHP

Tested up to

WP 6.9.7

Created

2018-04-13 (9y ago)

GPS Plotter by St. Pete Design allows you to track Android phones in real time. GPS Plotter displays a map on your website with your present location using Openstreet Maps or Google Maps. We recommend that you start with Openstreet Maps unless you have experience with Google Maps API. GPS Plotter was forked from a plugin called GPS Tracker by Nick Fox. Nick stopped development on GPS Tracker so we picked up where he left off. You can watch the cell phones being tracked using Openstreet maps and Google maps and you can store and reload routes easily for later viewing. The plugin is fully responsive and it will display properly on any device such as a cell phone, tablet or desktop computer. You can download the app from the Android store then you enter your username and the URL that you have installed the GPS Plotter plugin on. Now you are ready to click “Tracking On” to start sending GPS tracking information to that URL. Then you can go to that site on either your computer or mobile device and check out the GPS information you are sending for yourself. I hope you find this plugin useful. If you find any bugs, please email us so we can address any issues that come up immediately. Please rate it and leave a review so we can help other developers find this software. Thanks!

View on WordPress.org