Plugin icon

Fonto – Custom Web Fonts Manager

fonto

Vulnerabilities:

2

Last Updated:

May 17, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2025-04-03
Title
Fonto <= 1.2.2 - Authenticated (Author+) Arbitrary File Download
Fixed in
No known fix
CVSS
6.5 (medium)
Published
2024-10-16
Title
Fonto – Custom Web Fonts Manager < 1.2.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Fixed in
Fixed in 1.2.2
CVSS
6.4 (medium)