Extension WordPress
Vulnérabilités Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts
Cette page rassemble les failles publiées pour Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Fonts Plugin | Google Fonts, Adobe Fonts & Upload Fonts
3 fiches
Fonts <= 3.7.7 – Cross-Site Request Forgery
The Fonts plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.7.7. This is due to missing or incorrect nonce validation on the manage_kits() function. This makes it possible for unauthenticated attackers…
*-3.7.7
3.7.8
16/08/2024
Fonts <= 3.7.7 – Missing Authorization
The Fonts plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the get_kits() and manage_kits() function in versions up to, and including, 3.7.7. This makes it possible for…
*-3.7.7
3.7.8
16/08/2024
Google Fonts Typography <= 3.0.2 – Authenticated (Contributor+) Stored Cross-Site Scripting via blockType arguments
The Google Fonts Typography WordPress plugin before 3.0.3 does not escape and sanitize some of its block settings, allowing users with as role as low as Contributor to perform Stored Cross-Site Scripting attacks via blockType (combined with content),…
[*, 3.0.3)
3.0.3
23/08/2021
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.