Zhengdon 简数采集器
2 CVEs affecting Zhengdon 简数采集器. Latest disclosed: 2025-11-21. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-6220 | Critical | 9.8 | 2024-07-17 | The 简数采集器 (Keydatas) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the keydatas_downloadImages function i… |
CVE-2025-11973 | Medium | 4.9 | 2025-11-21 | The 简数采集器 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.6.3 via the __kds_flag functionality that imports f… |