Read the docs

jiangweifang

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

jiangweifang records in CISA KEV

No jiangweifang vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-85882 CVE-2026-92895 · GHSA-5xwf-2jpg-pxvv

Unauthenticated file upload in Live2DWebCanvas WordPress plugin

Priority LOW 39

The Live2DWebCanvas plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.2.1 via the download_one_file function.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00915 Published 2026-11-06 No fix listed CWE-434
TI-2024-12795 CVE-2024-13767 · GHSA-4m3p-r4gh-56j5

Live2DWebCanvas <= 1.9.11 - Authenticated (Subscriber+) Arbitrary File Deletion

Priority LOW 37

The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ClearFiles() function in all versions up to, and including, 1.9.11.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01069 Published 2025-01-31 No fix listed CWE-862
Open these records in search →