CVE-2024-47305

概要

参考情報

• patchstack.com/database/Wordpress/Plugin/use-any-font/vulnerability/wordpress-use-any-font-plugin-6-3-08-cross-site-request-forgery-csrf-vulnerability

use any font のその他の脆弱性

• CVE-2022-27851中 4.3Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin) <= 6.1.7 allows an attacker to deactivate the API key.
• CVE-2021-24977中 6.1The Use Any Font | Custom Font Uploader WordPress plugin before 6.2.1 does not have any authorisation checks when assigning a font, allowing…