EUVD-2023-36867

Malicious code in bioql PyPI...

Malicious code in google-webfonts-helper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ba7d8c4c4151033fdccecb7ed439075f6c8eb39490462dd7b25aac68d2a22482 The OpenSSF Package Analysis project identified...

MAL-2025-6798 Malicious code in google-webfonts-helper (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ba7d8c4c4151033fdccecb7ed439075f6c8eb39490462dd7b25aac68d2a22482 The OpenSSF Package Analysis project identified...

CVE-2024-43120

Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TypeSquare Webfonts: from n/a through 2.0.7...

CVE-2024-54402

Missing Authorization vulnerability in Mohamed Abd Elhalim Arabic Webfonts arabic-webfonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arabic Webfonts: from n/a through = 1.4.6...

CVE-2023-25458

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in GMO Internet Group, Inc. TypeSquare Webfonts for ConoHa plugin = 2.0.3 versions...

CVE-2023-34169

Cross-Site Request Forgery CSRF vulnerability in SAKURA Internet Inc. TS Webfonts for さくらのレンタルサーバ plugin = 3.1.2 versions...

CVE-2024-54402

Missing Authorization vulnerability in Mohamed Abd Elhalim Arabic Webfonts arabic-webfonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arabic Webfonts: from n/a through = 1.4.6...

CVE-2024-54402

CVE-2024-54402: Missing Authorization vulnerability in Jozoor Arabic Webfonts (Arabic Webfonts) allowing access control bypass due to incorrectly configured access control. Affected versions: Arabic Webfonts up to and including 1.4.6. CVSS v3.1 base score 4.3 (Network, Low privileges required, No...

CVE-2024-54402 WordPress Arabic Webfonts plugin <= 1.4.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Mohamed Abd Elhalim Arabic Webfonts arabic-webfonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arabic Webfonts: from n/a through = 1.4.6...

PT-2024-36289 · Unknown · Jozoor Arabic Webfonts

Name of the Vulnerable Software and Affected Versions: Jozoor Arabic Webfonts versions 1.4.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This vulnerability can be exploited d...

WordPress plugin Arabic Webfonts 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...

WordPress Arabic Webfonts plugin <= 1.4.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Marek Mikita Patchstack Alliance in WordPress Plugin Arabic Webfonts versions = 1.4.6...

CVE-2024-43120

Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TypeSquare Webfonts: from n/a through 2.0.7...

CVE-2024-43120 WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TypeSquare Webfonts: from n/a through 2.0.7...

CVE-2024-43120

CVE-2024-43120 describes a Missing Authorization vulnerability in TypeSquare Webfonts for WordPress (XSERVER TypeSquare Webfonts). Affected: TypeSquare Webfonts versions up to and including 2.0.7. Root cause: access to functionality not properly constrained by ACLs. Impact: potential access to re...

CVE-2024-43120 WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TypeSquare Webfonts: from n/a through 2.0.7...

WordPress plugin TypeSquare Webfonts 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-30308 · Unknown · Typesquare Webfonts

Name of the Vulnerable Software and Affected Versions: TypeSquare Webfonts versions 2.0.7 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 2.0.7 and earlier,...

WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin TypeSquare Webfonts versions = 2.0.7...