High · 7.1 CVE-2024-27194 EUVD-2024-24433GHSA-25v7-q3wp-pg2v

WordPress Fontific plugin <= 0.1.6 - CSRF to XSS vulnerability

Published Mar 16, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Andrei Ivasiuc Product: Fontific | Google Fonts

Description

Cross-Site Request Forgery (CSRF) vulnerability in Andrei Ivasiuc Fontific | Google Fonts allows Stored XSS.This issue affects Fontific | Google Fonts: from n/a through 0.1.6.

Affected products

Vendor	Product	Affected	Fixed
Andrei Ivasiuc	Fontific \| Google Fonts	≤ 0.1.6	—

References

https://patchstack.com/database/vulnerability/fontific/wordpress-fontific-plugin-0-1-6-csrf-to-xss-vulnerability?_s_id=cve vdb-entry