Read the docs

Steven Ellis

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Steven Ellis records in CISA KEV

No Steven Ellis vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Easy2map Photos 1 record MEDIUM

Records

3 records

TI-2015-08054 CVE-2015-10126 · GHSA-ff7w-85x3-gg32

Easy2Map Photos Plugin sql injection

Priority MEDIUM 50

A vulnerability classified as critical was found in Easy2Map Photos Plugin 1.0.1 on WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00608 Published 2023-10-06 No fix listed CWE-89
TI-2015-03863 CVE-2015-4615 · GHSA-755c-vwgj-9jvj

SQL injection in Steven Ellis Easy2map-photos WordPress Plugin

Priority MEDIUM 46

Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02212 Published 2019-02-15 No fix listed CWE-89
TI-2015-03865 CVE-2015-4617 · GHSA-qr32-x399-q68j

Path traversal in Steven Ellis Easy2map-photos WordPress Plugin

Priority LOW 37

Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying file names creating files outside of the upload directory.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02162 Published 2019-02-15 No fix listed CWE-22
Open these records in search →