← Back

Wp Google Fonts

wp_google_fonts

Vendor: Wp Google Fonts Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Wp Google Fonts Project
1Wp Google Fonts
Jun 17, 2026
Dec 6, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated user) before outputing...Show more
The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated user) before outputing them in attributes, leading Reflected Cross-Site Scripting issuesShow less