VIR Vulnerability Intelligence Relay

CVE-2015-7669

critical
Published 2017-12-27 · Modified 2026-05-13
CVSS v3
9.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2
7.5
VIR risk
9.8

Description

Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2) includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."

Predictions

Exploit likelihood
97%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — https://wordpress.org/plugins/easy2map/#developers

Application impact
VendorProductVersionsFixed
easy2mapeasy2map{"endExcluding":"1.3.0"}1.3.0

References

CWEs

CWE-22

Verify integrity in audit chain (admin only). AS-IS.