CVE-2015-7669

Critical

Published: 27/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Easy2Map plugin before version 1.3.0 for WordPress contains multiple directory traversal vulnerabilities in the includes/MapImportCSV2.php and includes/MapImportCSV.php files, allowing remote attackers to include and execute arbitrary files via the csvfile parameter related to upload file functionality.

Risk Assessment

Attackers can exploit these vulnerabilities to execute malicious code on the server, potentially leading to system compromise or data theft.

Recommendation

It is recommended to update the Easy2Map plugin to version 1.3.0 or later and review application security to minimize the risk of attacks.

Original NVD description (English source)

Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2) includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."