TI-2015-06385 CVE-2015-7683 · GHSA-pq7r-cj5m-jgr5Absolute path traversal vulnerability in Font.php in the Font plugin before 7.5.1 for…Priority LOW 27Absolute path traversal vulnerability in Font.php in the Font plugin before 7.5.1 for WordPress allows remote administrators to read arbitrary files via a full pathname in the url parameter to AjaxProxy.php.CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.05003 · Published 2015-10-16 · No fix listed CWE-22