Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin OMGF-Host Google Fonts Locally Multiple Vulnerabilities - CVE-2021-24639 - Vulnerability Database
WP Plugin Host Webfonts Local

WordPress Plugin OMGF-Host Google Fonts Locally Multiple Vulnerabilities - CVE-2021-24639

Critical
Reference: CVE-2021-24639
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-24639
Title: WordPress Plugin OMGF-Host Google Fonts Locally Multiple Vulnerabilities
Overview:

WordPress Plugin OMGF-Host Google Fonts Locally is prone to multiple vulnerabilities including directory traversal and security bypass vulnerabilities. Exploiting these issues could allow an attacker to obtain sensitive information that could aid in further attacks or to perform otherwise restricted actions and subsequently delete arbitrary files/folders. WordPress Plugin OMGF-Host Google Fonts Locally version 4.5.3 is vulnerable prior versions may also be affected.