CVE-2015-4616

CVE-2015-4616 describes a directory traversal flaw in the WordPress Easy2Map plugin, affecting versions prior to 1.2.5. The vulnerability occurs in includes/MapPinImageSave.php where an attacker can craft the map_id parameter with a ‘..’ sequence to create arbitrary files on the server. This is r...