Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Easy2map Component: Easy2map-photos Clear all filters
TI-2015-03865 CVE-2015-4617 · GHSA-qr32-x399-q68j

Path traversal in Steven Ellis Easy2map-photos WordPress Plugin

Priority LOW 37

Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying file names creating files outside of the upload directory.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02162 Published 2019-02-15 No fix listed CWE-22
TI-2015-03863 CVE-2015-4615 · GHSA-755c-vwgj-9jvj

SQL injection in Steven Ellis Easy2map-photos WordPress Plugin

Priority MEDIUM 46

Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02212 Published 2019-02-15 No fix listed CWE-89