[ CVE-2026-77193 · Published 24 Sep 2026 ]
Vulnerability in eesywp eesy_ID2WP – Publish InDesign HTML5
CVSS 7.5
EPSS <1%No fix listed yet
[ Description ]Official description
The eesy_ID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.3 via the `id2wp_path` parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.