Extension WordPress
Vulnérabilités OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.
Cette page rassemble les failles publiées pour OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy., leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.
4 fiches
OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. <= 5.7.9 – Missing Authorization to Unauthenticated Directory Deletion and Cross-Site Scripting
The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for WordPress is vulnerable to unauthorized modification of data and Stored Cross-Site Scripting due to a missing capability check on the update_settings() function hooked via admin_init in all…
*-5.7.9
5.7.10
02/01/2024
OMGF <= 4.5.11 – Authenticated (Admin+) Arbitrary Folder Deletion via Path Traversal
The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin
*-4.5.11
4.5.12
01/12/2021
OMGF <= 4.5.3 – Unauthenticated Path Traversal in REST API
The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows unauthenticated users to perform path traversal and overwrite arbitrary CSS file with Google Fonts CSS, or download fonts…
*-4.5.3
4.5.4
23/08/2021
OMGF <= 4.5.3 – Subscriber+ Arbitrary File/Folder Deletion
The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any authenticated users to delete arbitrary files or folders on the server.
*-4.5.3
4.5.4
23/08/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.