Skip to content
OpenAdvisories

Vendor

mlfactory

5 known vulnerabilities.

Products

DSGVO All in one for WP 3 DSGVO Google Web Fonts GDPR 1 Shirt Product Designer for WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-3535

    DSGVO Google Web Fonts GDPR <= 1.1 - Unauthenticated Arbitrary File Upload via 'fonturl' Parameter

    The DSGVO Google Web Fonts GDPR plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the `DSGVOGWPdownloadGoogleFonts()` function in all versions up to, and including, 1.1. The function is exposed via a `wp_ajax_n…

    mlfactory DSGVO Google Web Fonts GDPR Web / CMS