Read the docs

Wp Google Fonts Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp Google Fonts Project records in CISA KEV

No Wp Google Fonts Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Google Fonts 1 record LOW

Records

1 record in Wp Google Fonts · all components

TI-2021-07214 CVE-2021-24935 · GHSA-7j2q-gmf9-hmhh

WP Google Fonts < 3.1.5 - Reflected Cross-Site Scripting

Priority LOW 29

The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated user) before outputing…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00889 Published 2021-12-06 Fixed in 3.1.5 CWE-79
Open these records in search →