Skip to content
OpenAdvisories

Vendor

ashikcse

2 known vulnerabilities.

Products

CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2024-13768

    CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts <= 4.2 - Cross-Site Request Forgery to Font Assignment Deletion

    The CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2. This is due to missing or incorrect nonce validation on the cits_assign_font…

    ashikcse CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts Web / CMS
  • Medium 4.3
    CVE-2025-0807

    CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts <= 4.2 - Cross-Site Request Forgery to Settings Update

    The CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2. This is due to missing or incorrect nonce validation on the cits_settings_ta…

    ashikcse CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts Web / CMS