Beveiligingsadvies

CVE-2023-6600

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-01-03 05:31:18

Laatst bijgewerkt 2026-04-08 16:51:46

Toegewezen door Wordfence

CVSS-score 8.6

Status PUBLISHED

Beschrijving

The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for WordPress is vulnerable to unauthorized modification of data and Stored Cross-Site Scripting due to a missing capability check on the update_settings() function hooked via admin_init in all versions up to, and including, 5.7.9. This makes it possible for unauthenticated attackers to update the plugin's settings which can be used to inject Cross-Site Scripting payloads and delete entire directories. PLease note there were several attempted patched, and we consider 5.7.10 to be the most sufficiently patched.

← Alle CVE's bekijken Bekijk op cve.org ↗