Easy2map - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2019-02-15.

Products

• Easy2map - 2 CVEs
• Easy2map-photos - 2 CVEs

Newest CVEs of Easy2map

• CVE-2015-4615 - CVSS 9.8 (critical), 2019-02-15: Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML,…
• CVE-2015-4617 - CVSS 7.5 (high), 2019-02-15: Vulnerability in Easy2map-photos WordPress Plugin v1.09 MapPinImageUpload.php and MapPinIconSave.php allows path traversal when specifying file names creating…
• CVE-2015-7669 - CVSS 9.8 (critical), 2017-12-27: Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2) includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for…
• CVE-2015-7668 - CVSS 6.1 (medium), 2017-12-27: Cross-site scripting (XSS) vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject…