WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.
WordPress 6.5.x
Exploit
CVE-2012-6649
NVD
Refer to CVE-2012-6649 NVD advisory