Read the docs

Easy2map

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Easy2map records in CISA KEV

No Easy2map vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Easy2map 2 records MEDIUM Easy2map-photos 2 records MEDIUM

Records

4 records

TI-2015-06373 CVE-2015-7669 · GHSA-fvmx-w547-hmqf

Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2)…

Priority MEDIUM 52

Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2) includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary f…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.07249 Published 2017-12-27 No fix listed CWE-22
TI-2015-03863 CVE-2015-4615 · GHSA-755c-vwgj-9jvj

SQL injection in Steven Ellis Easy2map-photos WordPress Plugin

Priority MEDIUM 46

Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02212 Published 2019-02-15 No fix listed CWE-89
TI-2015-03865 CVE-2015-4617 · GHSA-qr32-x399-q68j

Path traversal in Steven Ellis Easy2map-photos WordPress Plugin

Priority LOW 37

Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying file names creating files outside of the upload directory.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02162 Published 2019-02-15 No fix listed CWE-22
Open these records in search →