WordPress OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin < 6.3.11 - Unauthenticated DoS vulnerability

Unauthenticated DoS vulnerability discovered by Ángel Santana in WordPress Plugin OMGF | Host Google Fonts Locally versions 6.3.11...

EUVD-2021-11933

Malware in sbrugna...

CVE-2021-25021: Improper Limitation of a Pathname to a Restricted Directory

The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin...

WordPress plugin 路径遍历漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A path traversal vulnerability exists in the WordPress plugin CAOS|Host Google Fonts Locally. The vulnerability stems from the program not...