2570 matches found
CVE-2026-58480
CVE-2026-58480 — Blocksy Companion Pro 未认证文件上传 RCE Advanced Reviews → saveattachments → Custom Fonts strpos 绕过 → shell.woff2.php 概述 CVE-2026-58480 （也被跟踪为 CVE-2026-15158 ）是 Blocksy Companion Pro 要求： 需拥有已激活 WooCommerce Extra （Advanced Reviews）与 Custom Fonts 扩展的高级许可证。免费的 blocksy-companion...
CVE-2026-4657
The Easy Google Fonts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the controlselectors meta field in all versions up to, and including, 2.0.4. This is due to the plugin registering the controlselectors meta field with showinrest enabled but without a sanitizecallback, an...
EUVD-2026-75240
The Easy Google Fonts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the controlselectors meta field in all versions up to, and including, 2.0.4. This is due to the plugin registering the controlselectors meta field with showinrest enabled but without a sanitizecallback, an...
CVE-2026-4657 Easy Google Fonts <= 2.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via control_selectors Meta Field
The Easy Google Fonts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the controlselectors meta field in all versions up to, and including, 2.0.4. This is due to the plugin registering the controlselectors meta field with showinrest enabled but without a sanitizecallback, an...
CVE-2026-4657
Easy Google Fonts WordPress plugin (≤ 2.0.4) is vulnerable to an authenticated stored cross-site script via the control_selectors meta field. The plugin registers this field with show_in_rest enabled but omits a sanitize_callback, then outputs the unsanitized value directly into tags on the fron...
PT-2026-89268
The Easy Google Fonts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the control selectors meta field in all versions up to, and including, 2.0.4. This is due to the plugin registering the control selectors meta field with show in rest enabled but without a sanitize callbac...
WordPress Easy Google Fonts plugin <= 2.0.4 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability
Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Kitch in WordPress Plugin Easy Google Fonts versions = 2.0.4...
firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component...
CVE-2026-73018
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...
CVE-2026-72986
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...
CVE-2026-69576
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally...
EUVD-2026-73753
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...
CVE-2026-73018
CVE-2026-73018 is a heap-based buffer overflow in the Graphic Fonts component that allows an unauthorized attacker to achieve remote code execution over a network, with user interaction required . Scored CVSS 8.8 HIGH (C/H I/H A/H) and published by Microsoft (source: [email protected]). No spe...
EUVD-2026-73260
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...
CVE-2026-72986
CVE-2026-72986 is a heap-based buffer overflow in Graphic Fonts that allows an unauthorized attacker to achieve remote code execution over a network. The CNA (Microsoft) assigns a CVSS 3.1 score of 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-reachable exp...
EUVD-2026-73143
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally...
CVE-2026-69576
CVE-2026-69576 is a use-after-free vulnerability in the Microsoft Graphic Fonts component that allows an authorized attacker with low privileges to elevate privileges locally without user interaction. The CNA-assigned CVSS v3.1 score is 7.8 (HIGH) , with high impact across confidentiality, integr...
firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component...
