Extension WordPress
Vulnérabilités Easy2Map
Cette page rassemble les failles publiées pour Easy2Map, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Easy2Map
4 fiches
Easy2Map <= 1.2.9 – Reflected Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map_id parameter.
*-1.2.9
1.3.0
05/10/2015
Easy2Map <= 1.2.9 – Directory Traversal and Local File Inclusion
Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2) includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include and execute arbitrary files via the csvfile parameter related to "upload file functionality."
*-1.2.9
1.3.0
05/10/2015
Easy2Map <= 1.2.4 – SQL Injection
Multiple SQL injection vulnerabilities in includes/Function.php in the Easy2Map plugin before 1.2.5 for WordPress allow remote attackers to execute arbitrary SQL commands via the mapName parameter in an e2m_img_save_map_name action to wp-admin/admin-ajax.php and other unspecified vectors.
[*, 1.2.5)
1.2.5
08/06/2015
Easy2Map <= 1.2.4 – Directory Traversal
Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers to create arbitrary files via a .. (dot dot) in the map_id parameter.
[*, 1.2.5)
1.2.5
08/06/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.