CVE-2015-4616: EASY2MAP Project EASY2MAP

Medium severity, CVSS 5.0. EPSS: 10.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers to create arbitrary files via a .. (dot dot) in the map_id parameter.

Affected products

• EASY2MAP Project EASY2MAP: up to and including 1.2.4

Published 2015-07-08. Last modified 2026-06-17.