Read the docs

Keydatas

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Keydatas records in CISA KEV

No Keydatas vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Keydatas 1 record HIGH

Records

1 record in Keydatas · all components

TI-2024-05768 CVE-2024-6220 · GHSA-29rm-j4cx-hmc5

简数采集器 (Keydatas) <= 2.5.2 - Unauthenticated Arbitrary File Upload

Priority HIGH 69

The 简数采集器 (Keydatas) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the keydatas_downloadImages function in all versions up to, and including, 2.5.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.35463 Published 2024-07-17 No fix listed CWE-434
Open these records in search →