Lucene search

K
wpvulndbWpvulndbWPVDB-ID:62E71E19-887D-490C-AE88-E3BFAB04D3B1
HistoryMay 07, 2024 - 12:00 a.m.

Embed Google Fonts <= 3.1.0 - Missing Authorization

2024-05-0700:00:00
wpscan.com
4
wordpress
google fonts
vulnerability
unauthorized access

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

Description The Embed Google Fonts plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.1.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

Related for WPVDB-ID:62E71E19-887D-490C-AE88-E3BFAB04D3B1