WordPress Plugin Vulnerabilities

Anyfont <= 2.2.3 - XSS

Description

Plugin is still affected and has been closed.

Affects Plugins

Plugin icon
anyfont
No known fix

References

CVE
CVE-2014-4515
URL
https://codevigilant.com/disclosure/wp-plugin-anyfont-a3-cross-site-scripting-xss

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
f6355923-2e2d-4db9-8255-2a71cff1f044

Timeline

Publicly Published
2014-07-02 (about 11 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2024-08-09
Title
Easy Digital Downloads – Sell Digital Files & Subscriptions (eCommerce Store + Payments Made Easy) < 3.3.3 - Authenticated (Admin+) Stored Cross-Site Scripting via Agreement Text
Published
2025-03-24
Title
DICOM Support < 0.10.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-01-24
Title
Caching Compatible Cookie Opt-In and JavaScript < 0.0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-09-19
Title
WordPress Charts < 0.7.0 - Contributor+ Stored XSS
Published
2024-09-30
Title
Store Exporter for WooCommerce < 2.7.3 - Reflected Cross-Site Scripting