Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Steven Ellis Clear all filters
TI-2015-08054 CVE-2015-10126 · GHSA-ff7w-85x3-gg32

Easy2Map Photos Plugin sql injection

Priority MEDIUM 50

A vulnerability classified as critical was found in Easy2Map Photos Plugin 1.0.1 on WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00608 Published 2023-10-06 No fix listed CWE-89
TI-2015-03865 CVE-2015-4617 · GHSA-qr32-x399-q68j

Path traversal in Steven Ellis Easy2map-photos WordPress Plugin

Priority LOW 37

Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying file names creating files outside of the upload directory.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02162 Published 2019-02-15 No fix listed CWE-22
TI-2015-03863 CVE-2015-4615 · GHSA-755c-vwgj-9jvj

SQL injection in Steven Ellis Easy2map-photos WordPress Plugin

Priority MEDIUM 46

Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02212 Published 2019-02-15 No fix listed CWE-89