Read the docs

vlad.olaru

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

vlad.olaru records in CISA KEV

No vlad.olaru vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-08283 CVE-2024-8920 · GHSA-5vxc-2qqr-5x28

Fonto – Custom Web Fonts Manager <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

Priority LOW 30

The Fonto – Custom Web Fonts Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00363 Published 2024-10-17 No fix listed CWE-79
TI-2025-22964 CVE-2025-31827 · GHSA-6wvh-43r9-m9g8

WordPress Fonto plugin <= 1.2.2 - Arbitrary File Download vulnerability

Priority LOW 23

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vlad.olaru Fonto fonto allows Path Traversal.This issue affects Fonto: from n/a through <= 1.2.2.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00564 Published 2025-04-03 No fix listed CWE-22
Open these records in search →