Vulnerabilities

TI-2024-31623 CVE-2024-47305 · GHSA-hqfh-qjr5-xcfm

WordPress Use Any Font plugin <= 6.3.08 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Dnesscarkey Use Any Font use-any-font allows Cross Site Request Forgery.This issue affects Use Any Font: from n/a through <= 6.3.08.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00208 Published 2024-09-25 No fix listed CWE-352

TI-2022-10734 CVE-2022-27851 · GHSA-9425-89m4-hr22

WordPress Use Any Font plugin <= 6.1.7 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 25

Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin) <= 6.1.7 allows an attacker to deactivate the API key.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00397 Published 2022-04-15 No fix listed CWE-352

TI-2021-07256 CVE-2021-24977 · GHSA-vj7q-773h-8qqf

Use Any Font < 6.2.1 - Unauthenticated Arbitrary CSS Appending

LOW 30

The Use Any Font | Custom Font Uploader WordPress plugin before 6.2.1 does not have any authorisation checks when assigning a font, allowing unauthenticated users to sent arbitrary CSS which will then be processed by the…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01492 Published 2022-02-28 Fixed in 6.2.1 CWE-862

Vulnerabilities

Filters

WordPress Use Any Font plugin <= 6.3.08 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Use Any Font plugin <= 6.1.7 - Cross-Site Request Forgery (CSRF) vulnerability

Use Any Font < 6.2.1 - Unauthenticated Arbitrary CSS Appending