3 matches found
CVE-2015-4615
Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables...
PT-2019-7187
Name of the Vulnerable Software and Affected Versions Easy2map-photos WordPress Plugin version 1.09 Description The issue allows SQL Injection due to unsanitized variables, including mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML, and mapID. Recommendation...
PT-2019-7188
Name of the Vulnerable Software and Affected Versions Easy2map-photos WordPress Plugin version 1.09 Description The issue allows path traversal when specifying file names, enabling the creation of files outside of the upload directory. This is due to a vulnerability in the MapPinImageUpload.php a...