Eesy - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/eesy/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 24 Sep 2026 10:46:35 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgUnauthenticated Path Traversal in eesy_ID2WP WordPress Pluginhttps://feed.craftedsignal.io/briefs/2026-09-eesy-id2wp-path-traversal/Thu, 24 Sep 2026 10:46:35 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-eesy-id2wp-path-traversal/The eesy_ID2WP WordPress plugin contains a path traversal vulnerability (CVE-2026-77193) via the id2wp_path parameter, allowing unauthenticated attackers to read arbitrary files from the hosting server.The eesy_ID2WP - Publish InDesign HTML5 plugin for WordPress is vulnerable to a path traversal vulnerability (CVE-2026-77193) affecting all versions up to and including 1.0.3. The vulnerability exists within the 'id2wp_path' parameter, which fails to properly sanitize user-provided input before using it to access files on the underlying server filesystem. An unauthenticated attacker can exploit this flaw by submitting crafted requests to the plugin to traverse directory structures, potentially reading sensitive configuration files, system files, or application source code. This vulnerability poses a significant risk to the confidentiality of the affected WordPress environment.

Impact

Successful exploitation allows unauthenticated attackers to read arbitrary files on the web server. Depending on server configuration and file permissions, this can lead to the exposure of sensitive data including database credentials, wp-config.php files, system environment variables, and site content.

Recommendation

  • Update the eesy_ID2WP plugin to a version beyond 1.0.3 immediately.
  • Implement Web Application Firewall (WAF) rules to inspect the 'id2wp_path' parameter for directory traversal sequences such as '../' or '..%2f'.
  • Audit web server access logs for requests containing suspicious path traversal patterns targeting the plugin's endpoints.
]]>highadvisoryweb-vulnerabilitywordpresscve