Skip to content
Sign in
Not rated

CVE-2021-25021 The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting,…

Description

The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin

Affected products and versions

Product Affected versions Fixed in
OMGF | Host Google Fonts Locally 4.5 earliest → < 4.5.12 4.5.12

Other CVEs of OMGF | Host Google Fonts Locally

The 3 CVEs of OMGF | Host Google Fonts Locally →
CVE-2021-24639 The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the… Not rated CVE-2021-24638 The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows… Not rated
Track this CVE