WordPress security by component

Live2DWebCanvas

Plugin description

Live2DWebCanvas is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 31, 2025; the highest CVE/CNA score is 8.1.

Plugin slug: live-2d

Latest vulnerability

CVE-2024-13767: Live2DWebCanvas: Code execution

Live2DWebCanvas is affected by code execution. Exploitation requires at least subscriber-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.

PublishedJan 31, 2025

Safe version guidanceSee mitigation notes

		Safe version
Jan 31, 2025	CVE-2024-13767 Live2DWebCanvas: Code execution Live2DWebCanvas is affected by code execution. Exploitation requires at least subscriber-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.	See mitigation notes	CVE8.1 NVDPending