CyberSecBulletin

Jiangweifang vulnerabilities

We track 2 vulnerabilities in Jiangweifang products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2026.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest Jiangweifang vulnerabilities

  • 8.1 High severity

    Live2DWebCanvas: Unrestricted Upload of File with Dangerous Type

    CVE-2026-92895Jiangweifang

    The Live2DWebCanvas plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.2.1 via the download_one_file function. This is due to missing file extension whitelist and MIME type validation in download_one_file() when

  • 8.1 High severity

    Live2DWebCanvas: Missing Authorization

    CVE-2024-13767JiangweifangEPSS 1.07%

    The Live2DWebCanvas plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ClearFiles() function in all versions up to, and including, 1.9.11. This makes it possible for authenticated attackers, with Subsc