readme.txt

@@ -4,7 +4,7 @@ Donate link: https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_i
 Tags: maps, gpx, gps, graph, chart, google maps, highcharts, track, garmin, image, nextgen-gallery, nextgen, exif, OpenStreetMap, OpenCycleMap, Hike&Bike, heart rate, heartrate, cadence
 Requires at least: 2.0.0
 Tested up to: 3.3
-Stable tag: 1.1.22
+Stable tag: 1.1.23
 License: GPLv2 or later
 
 Draws a gpx track with altitude graph. You can also display your nextgen gallery images in the map.
@@ -123,6 +123,8 @@ Yes!
 1. Altitude & Speed & Hearth rate
 
 == Changelog ==
+= 1.1.23 =
+* Security fix, please update!
 = 1.1.22 =
 * enable map zoom on scroll wheel (check settings)
 * test attributes in get params

wp-gpx-maps.php

@@ -3,7 +3,7 @@
 Plugin Name: WP-GPX-Maps
 Plugin URI: http://www.darwinner.it/
 Description: Draws a gpx track with altitude graph
-Version: 1.1.22
+Version: 1.1.23
 Author: Bastianon Massimo
 Author URI: http://www.pedemontanadelgrappa.it/
 License: GPL

wp-gpx-maps_admin.php

@@ -24,7 +24,6 @@ function WP_GPX_Maps_html_page() {
 	$cacheGpxPath = gpxCacheFolderPath();
 	$relativeGpxPath = relativeGpxFolderPath();
 	$relativeGpxPath = str_replace("\\","/", $relativeGpxPath);
-	$gpxRegEx = '/.gpx$/';
 	
 	$tab = $_GET['tab'];
 	

wp-gpx-maps_admin_tracks.php

@@ -1,5 +1,10 @@
 <?php
 
+	if ( !is_admin() )
+		return;
+	
+	$gpxRegEx = '/.gpx$/';
+
 	if ( isset($_POST['delete']) )
 	{
 		$del = $_POST['delete'];