Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: jiangweifang Clear all filters
TI-2026-85882 CVE-2026-92895 · GHSA-5xwf-2jpg-pxvv

Unauthenticated file upload in Live2DWebCanvas WordPress plugin

Priority LOW 39

The Live2DWebCanvas plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.2.1 via the download_one_file function.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00915 Published 2026-11-06 No fix listed CWE-434
TI-2024-12795 CVE-2024-13767 · GHSA-4m3p-r4gh-56j5

Live2DWebCanvas <= 1.9.11 - Authenticated (Subscriber+) Arbitrary File Deletion

Priority LOW 37

The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ClearFiles() function in all versions up to, and including, 1.9.11.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01069 Published 2025-01-31 No fix listed CWE-862