Skip to content

CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2022-27851

WordPress Use Any Font plugin <= 6.1.7 - Cross-Site Request Forgery (CSRF) vulnerability

Read JSON ↗CVE.org ↗

Status: Published
Published: 2022-04-15
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin) <= 6.1.7 allows an attacker to deactivate the API key.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dnesscarkey Use Any Font | Custom Font Uploader (WordPress plugin)

<= 6.1.7 to ≤ 6.1.7affected

References