91 matches found
CVE-2024-54402
CVE-2024-54402: Missing Authorization vulnerability in Jozoor Arabic Webfonts (Arabic Webfonts) allowing access control bypass due to incorrectly configured access control. Affected versions: Arabic Webfonts up to and including 1.4.6. CVSS v3.1 base score 4.3 (Network, Low privileges required, No...
PT-2024-36289 · Unknown · Jozoor Arabic Webfonts
Name of the Vulnerable Software and Affected Versions: Jozoor Arabic Webfonts versions 1.4.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This vulnerability can be exploited d...
WordPress plugin Arabic Webfonts has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
CVE-2024-54402: Missing Authorization
Missing Authorization vulnerability in Mohamed Abd Elhalim Arabic Webfonts arabic-webfonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arabic Webfonts: from n/a through = 1.4.6...
WordPress Arabic Webfonts plugin <= 1.4.6 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Marek Mikita Patchstack Alliance in WordPress Plugin Arabic Webfonts versions = 1.4.6...
CVE-2024-43120
Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TypeSquare Webfonts: from n/a through 2.0.7...
CVE-2024-43120 WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TypeSquare Webfonts: from n/a through 2.0.7...
CVE-2024-43120 WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TypeSquare Webfonts: from n/a through 2.0.7...
CVE-2024-43120
CVE-2024-43120 describes a Missing Authorization vulnerability in TypeSquare Webfonts for WordPress (XSERVER TypeSquare Webfonts). Affected: TypeSquare Webfonts versions up to and including 2.0.7. Root cause: access to functionality not properly constrained by ACLs. Impact: potential access to re...
PT-2024-30308 · Unknown · Typesquare Webfonts
Name of the Vulnerable Software and Affected Versions: TypeSquare Webfonts versions 2.0.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 2.0.7 and earlier,...
CVE-2024-43120: Missing Authorization
Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TypeSquare Webfonts: from n/a through 2.0.7...
WordPress Plugin TypeSquare Webfonts has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin TypeSquare Webfonts versions = 2.0.7...
WordPress TypeSquare Webfonts Plugin <= 2.0.7 is vulnerable to Broken Access Control
Software TypeSquare Webfonts Type Plugin Vulnerable versions = 2.0.7 Fixed in 2.0.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43120 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID d4d917faff73 Credits Rafie Muhammad Patchstack...
TS Webfonts for さくらのレンタルサーバ < 3.1.3 - Font Settings Change via CSRF
Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...
TS Webfonts for さくらのレンタルサーバ < 3.1.1 - Admin+ Stored Cross-Site Scripting
Description The plugin does not sanitise and escape some parameters, which could allow users with a role of Admin to perform Cross-Site Scripting attacks, for example on multisite instances...
CVE-2023-34169
Cross-Site Request Forgery CSRF vulnerability in SAKURA Internet Inc. TS Webfonts for さくらのレンタルサーバ plugin = 3.1.2 versions...
CVE-2023-34169
Cross-Site Request Forgery CSRF vulnerability in SAKURA Internet Inc. TS Webfonts for さくらのレンタルサーバ plugin = 3.1.2 versions...
