一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月24日

CVE-2026-77193 [HIGH] – The eesy_ID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Travers

未分类
📑 文章目录

The eesy_ID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.3 via the `id2wp_path` parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.