Read the docs

Ffw

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Ffw records in CISA KEV

No Ffw vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Omgf 2 records MEDIUM Optimize My Google Fonts 1 record LOW

Records

3 records

TI-2021-06921 CVE-2021-24638 · GHSA-728f-qcc4-8q48

OMGF < 4.5.4 - Unauthenticated Path Traversal in REST API

Priority MEDIUM 43

The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows unauthenticated users to perform path traversal and overwrite arbitrary CSS file with Google Fonts CSS…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01821 Published 2021-09-20 Fixed in 4.5.4 CWE-22
TI-2021-06922 CVE-2021-24639 · GHSA-9w5p-x556-4j8v

OMGF < 4.5.4 - Subscriber+ Arbitrary File/Folder Deletion

Priority LOW 37

The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any authenticated users to delete arbitrary files or folders on…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00912 Published 2021-09-20 Fixed in 4.5.4 CWE-22
TI-2021-07299 CVE-2021-25021 · GHSA-w8vh-gv77-c8pw

OMGF < 4.5.12 - Admin+ Arbitrary Folder Deletion via Path Traversal

Priority LOW 25

The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalli…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01055 Published 2022-01-03 Fixed in 4.5.12 CWE-22
Open these records in search →