Plugin icon

OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.

host-webfonts-local

Vulnerabilities:

6

Last Updated:

October 12, 2026

Active Installs:

300000

Published
Title
Fixed in
CVSS
Published
2026-10-06
Title
OMGF < 6.3.11 - Unauthenticated Stored XSS via 's' Parameter in comments-atom Feed
Fixed in
Fixed in 6.3.11
CVSS
7.2 (high)
Published
2026-09-29
Title
OMGF < 6.3.11 - Unauthenticated DoS via do_optimize
Fixed in
Fixed in 6.3.11
CVSS
7.5 (high)
Published
2024-01-02
Title
OMGF < 5.7.10 - Unauthenticated Directory Deletion & Stored XSS
Fixed in
Fixed in 5.7.10
CVSS
8.6 (high)
Published
2021-12-01
Title
OMGF < 4.5.12 - Admin+ Arbitrary Folder Deletion via Path Traversal
Fixed in
Fixed in 4.5.12
CVSS
6.5 (medium)
Published
2021-08-23
Title
OMGF < 4.5.4 - Subscriber+ Arbitrary File/Folder Deletion
Fixed in
Fixed in 4.5.4
CVSS
9.6 (critical)
Published
2021-08-23
Title
OMGF < 4.5.4 - Unauthenticated Path Traversal in REST API
Fixed in
Fixed in 4.5.4
CVSS
6.5 (medium)