GCVE - cpe:2.3:a:zhengdon:简数采集器:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:zhengdon:简数采集器:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Zhengdon (`4300ccc0-b296-5e2d-9107-530922d00e2e`)
Product	简数采集器 (`8442b8b5-caab-5b57-8912-f7461fc84545`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-11973`	vulnerable	2026-06-08 07:04:29.498167	简数采集器 <= 2.6.3 - Authenticated (Admin+) Arbitrary File Read MEDIUM (4.9) The 简数采集器 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.6.3 via the __kds_flag functionality that imports featured images. This makes it possible for authenticated attackers, with Adminstrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. Published: 2025-11-21T08:28:12.074Z Updated: 2026-04-08T16:58:05.517Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/66dc2ca2-c61c-4c73-aa2a-0017299cbca5?source=cve https://wordpress.org/plugins/keydatas/ https://plugins.trac.wordpress.org/browser/gallery-photo-gallery/trunk/includes/lists/class-gallery-photo-gallery-list-table.php#L1060	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6220`	vulnerable	2026-06-08 06:58:18.274921	简数采集器 (Keydatas) <= 2.5.2 - Unauthenticated Arbitrary File Upload CRITICAL (9.8) The 简数采集器 (Keydatas) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the keydatas_downloadImages function in all versions up to, and including, 2.5.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Published: 2024-07-17T07:32:19.236Z Updated: 2026-04-08T16:50:34.205Z Open on db.gcve.eu Reference links https://www.wordfence.com/threat-intel/vulnerabilities/id/49ae7971-7bdf-4369-b04b-fb48ea5b9518?source=cve https://plugins.trac.wordpress.org/browser/keydatas/trunk/keydatas.php https://plugins.trac.wordpress.org/changeset/3127334/keydatas?contextall=1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.