WordPress Plugin Vulnerabilities
Font Awesome 4.0.0-RC15 & RC16 - API Token & Access Token Disclosure
Description
The vulnerability exposes the Font Awesome API token and access token for users who have configured the plugin to use a kit. If compromised, these tokens could give an unauthorized person access to that user’s list of kits and kit settings.
Affects Plugins
Fixed in 4.0.0-RC17 References
Miscellaneous
Verified
No
WPVDB ID
Timeline
Publicly Published
2020-03-11 (about 6 years ago)
Added
2020-03-11 (about 6 years ago)
Last Updated
2020-03-12 (about 6 years ago)
WPScan 