CVE-2015-7669

9.8 criticalEPSS 7.2%

Critical (9.8) in easy2map easy2map. EPSS 7.2% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2) includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 7.2% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2017-12-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

easy2map:easy2map

References

http://www.securityfocus.com/archive/1/536597/100/0/threaded
https://wordpress.org/plugins/easy2map/#developers
https://wpvulndb.com/vulnerabilities/8206
http://www.securityfocus.com/archive/1/536597/100/0/threaded
https://wordpress.org/plugins/easy2map/#developers

Check your stack JSON