Extension WordPress

Vulnérabilités CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts

Cette page rassemble les failles publiées pour CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
0Critiques
1Avec correctif
6,4CVSS maximal

Historique de sécurité

CVE et vulnérabilités de CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts

3 fiches

CVE-2025-0807 Moyenne · 4,3
CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts

CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts <= 4.2 – Cross-Site Request Forgery to Settings Update

The CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2. This is due to missing or incorrect nonce…

Versions affectées

*-4.2

Correctif

Non indiqué

Publication

21/03/2025

CVE-2024-13768 Moyenne · 4,3
CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts

CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts <= 4.2 – Cross-Site Request Forgery to Font Assignment Deletion

The CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2. This is due to missing or incorrect nonce…

Versions affectées

*-4.2

Correctif

Non indiqué

Publication

21/03/2025

CVE-2023-5458 Moyenne · 6,4
CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts

CITS Support svg, webp Media and TTF,OTF File Upload <= 2.1.0 – Authenticated(Author+) Stored Cross-Site Scripting via SVG Upload

The CITS Support svg, webp Media and TTF,OTF File Upload plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG upload in versions up to, and including, 2.1.0 due to insufficient SVG sanitization. This makes it possible…

Versions affectées

[*, 3.0)

Correctif

3.0

Publication

09/10/2023

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités