CVE-2026-92895

The Live2DWebCanvas plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.2.1 via the downloadonefile function. This is due to missing file extension whitelist and MIME type validation in downloadonefile when writing files derived from...

EUVD-2026-118196

The Live2DWebCanvas plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.2.1 via the downloadonefile function. This is due to missing file extension whitelist and MIME type validation in downloadonefile when writing files derived from...

CVE-2026-92895 Live2DWebCanvas <= 2.2.1 - Unauthenticated Arbitrary File Upload via 'modelApi' Parameter

The Live2DWebCanvas plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.2.1 via the downloadonefile function. This is due to missing file extension whitelist and MIME type validation in downloadonefile when writing files derived from...

CVE-2026-92895

The Live2DWebCanvas plugin for WordPress (versions up to and including 2.2.1 ) is vulnerable to Unauthenticated Arbitrary File Upload via the download_one_file function. The root cause is a lack of file extension whitelisting and MIME type validation when writing files from attacker-controlled ma...