CVE-2026-77193
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Sep 24, 2026
Vendor
unknown
Description
The eesy_ID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.3 via the `id2wp_path` parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.