Skip to content
OpenAdvisories

Vendor

vlad.olaru

2 known vulnerabilities.

Products

Fonto – Custom Web Fonts Manager 1 Fonto 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.9
    CVE-2025-31827

    WordPress Fonto plugin <= 1.2.2 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vlad.olaru Fonto fonto allows Path Traversal.This issue affects Fonto: from n/a through <= 1.2.2.

    vlad.olaru Fonto
  • Medium 6.4
    CVE-2024-8920

    Fonto – Custom Web Fonts Manager <= 1.2.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Fonto – Custom Web Fonts Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for auth…

    vlad.olaru Fonto – Custom Web Fonts Manager Web / CMS