CVE-2021-25021
Medium
Description
The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin
SeverityMedium
CVSS4.9
Exploit probability—
ProductFfw Optimize My Google Fonts
PublishedJan 3, 2022
First seenJan 3, 2022
Weakness typeCWE-22Path traversal
How to fix
Update
- ffw optimize_my_google_fonts4.5.12 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ffw optimize_my_google_fonts | v < 4.5.12 | 4.5.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.