CVE-2015-7669: EASY2MAP

Critical severity, CVSS 9.8. EPSS: 7.2% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2) includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."

Affected products

• EASY2MAP EASY2MAP: before 1.3.0 (fixed in 1.3.0)

Published 2017-12-27. Last modified 2026-06-17.