Extension WordPress
Vulnérabilités Custom Fonts – Host Your Fonts Locally
Cette page rassemble les failles publiées pour Custom Fonts – Host Your Fonts Locally, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Custom Fonts – Host Your Fonts Locally
2 fiches
Custom Fonts – Host Your Fonts Locally <= 2.1.16 – Missing Authorization to Unauthenticated Font Deletion
The Custom Fonts – Host Your Fonts Locally plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'BCF_Google_Fonts_Compatibility' class constructor function in all versions up to, and including, 2.1.16.…
*-2.1.16
2.1.17
19/01/2026
Custom Fonts – Host Your Fonts Locally <= 2.1.4 – Authenticated (Author+) Stored Cross-Site Scripting
The Custom Fonts – Host Your Fonts Locally plugin for WordPress is vulnerable to Stored Cross-Site Scripting via svg file upload in all versions up to, and including, 2.1.4 due to insufficient input sanitization and output escaping. This…
*-2.1.4
2.1.5
23/05/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.