Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: vlad.olaru Clear all filters
TI-2025-22964 CVE-2025-31827 · GHSA-6wvh-43r9-m9g8

WordPress Fonto plugin <= 1.2.2 - Arbitrary File Download vulnerability

Priority LOW 23

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vlad.olaru Fonto fonto allows Path Traversal.This issue affects Fonto: from n/a through <= 1.2.2.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00564 Published 2025-04-03 No fix listed CWE-22
TI-2024-08283 CVE-2024-8920 · GHSA-5vxc-2qqr-5x28

Fonto – Custom Web Fonts Manager <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

Priority LOW 30

The Fonto – Custom Web Fonts Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00363 Published 2024-10-17 No fix listed CWE-79