VYPR

eesy_ID2WP

by WordPress

CVEs (1)

  • CVE-2026-77193HigSep 24, 2026
    risk 0.42cvss 7.5epss

    The eesy_ID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.3 via the `id2wp_path` parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server,…