CVE-2022-37405

CVE-2022-37405 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Better Font Awesome (versions <= 2.0.1). Multiple connected sources confirm the flaw: an attacker could trigger unintended actions by exploiting CSRF, particularly in settings update flows (WPVul...

CVE-2022-4512

The Better Font Awesome WordPress plugin is vulnerable to Stored XSS in versions before 2.0.4 due to insufficient validation/escaping of certain shortcode attributes before output. Impacted scope includes pages/posts embedding the shortcode, with attacker privileges at Contributor or higher able ...