Description
Cross-Site Request Forgery (CSRF) vulnerability in Fonts Plugin Fonts allows Stored XSS.This issue affects Fonts: from n/a through 3.7.7.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fonts Plugin | Fonts | ≤ 3.7.7 | — |
High · 7.1
CVE-2024-43301
EUVD-2024-40193GHSA-vqf8-44qw-c23j
WordPress Fonts plugin <= 3.7.7 - Cross Site Request Forgery (CSRF) to Stored XSSvulnerability
Published Aug 26, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack