WordPress plugin Live2DWebCanvas 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-2264 · WordPress · Live2Dwebcanvas

Name of the Vulnerable Software and Affected Versions: Live2DWebCanvas plugin for WordPress versions up to, and including, 1.9.11 Description: The issue is related to insufficient file path validation in the ClearFiles function, allowing authenticated attackers with Subscriber-level access and...

CVE-2024-13767: Missing Authorization

The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ClearFiles function in all versions up to, and including, 1.9.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete...