Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/02/04 11:51 p.m.2 views

CVE-2024-13767

The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ClearFiles function in all versions up to, and including, 1.9.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete...

8.1CVSS7.7AI score0.01332EPSS
Exploits0References1
NVD
NVD
added 2025/01/31 3:15 a.m.4 views

CVE-2024-13767

The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ClearFiles function in all versions up to, and including, 1.9.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete...

8.1CVSS0.01332EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/01/31 2:24 a.m.14 views

CVE-2024-13767 Live2DWebCanvas <= 1.9.11 - Authenticated (Subscriber+) Arbitrary File Deletion

The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ClearFiles function in all versions up to, and including, 1.9.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete...

8.1CVSS0.01332EPSS
Exploits0References3
CVE
CVE
added 2025/01/31 2:24 a.m.46 views

CVE-2024-13767

CVE-2024-13767 (Live2DWebCanvas

8.1CVSS8.3AI score0.01332EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/01/31 2:24 a.m.4 views

CVE-2024-13767 Live2DWebCanvas <= 1.9.11 - Authenticated (Subscriber+) Arbitrary File Deletion

The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ClearFiles function in all versions up to, and including, 1.9.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete...

8.1CVSS8.3AI score0.01332EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/01/31 12:0 a.m.1 views

WordPress plugin Live2DWebCanvas 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

8.1CVSS8.8AI score0.01332EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/01/30 6:51 p.m.2 views

WordPress Live2DWebCanvas plugin <= 1.9.11 - Authenticated (Subscriber+) Arbitrary File Deletion vulnerability

Authenticated Subscriber+ Arbitrary File Deletion vulnerability discovered by Lucio Sá in WordPress Plugin Live2DWebCanvas versions = 1.9.11...

8.1CVSS7AI score0.01332EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder