CVE-2015-4616: Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for W...

Security readout for executives and security teams

CVE-2015-4616 affects the Easy2Map WordPress plugin before 1.2.5. A remote attacker could abuse a directory traversal flaw to create files outside the intended location. For an executive, the concern is possible website tampering or foothold creation on sites still running this old plugin. Exposure is limited to WordPress sites with Easy2Map plugin versions before 1.2.5. The supplied CPE data is incomplete, so asset inventory must confirm plugin presence and version directly. Prioritize internet-facing WordPress sites first. This is an old vulnerability, but public exploit references and arbitrary file creation make lingering exposure materially risky. Mitigation focus: Update Easy2Map to version 1.2.5 or later if still maintained.; Disable and remove Easy2Map where it is not business-required.; Review vendor and WordPress plugin guidance before applying production changes..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.