Aller au contenu
Se connecter
Non notée

CVE-2021-25021 The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting,…

Description

The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin

Produits et versions touchés

Produit Versions touchées Corrigé en
OMGF | Host Google Fonts Locally 4.5 premières → < 4.5.12 4.5.12

Autres CVE de OMGF | Host Google Fonts Locally

Les 3 CVE de OMGF | Host Google Fonts Locally →
CVE-2021-24639 The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the… Non notée CVE-2021-24638 The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows… Non notée
Suivre cette CVE