WordSec
WordSec

CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts

Explore CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts vulnerabilities across all versions. Currently tracking 3 known vulnerabilities, including severity, impact, and patch status.

01234567891009.10.2023Today09.10.20236.4CITS Support svg, webp Media and TTF,OTF File Upload <= 2.1.0 - Authenticated(Author+) Stored Cross-Site Scripting via SVG Upload CVSS 6.4 · 09.10.202321.03.20254.3CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts <= 4.2 - Cross-Site Request Forgery to Settings Update CVSS 4.3 · 21.03.20254.3CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts <= 4.2 - Cross-Site Request Forgery to Font Assignment Deletion CVSS 4.3 · 21.03.2025

Strategic Overview

Avg CVSSMedium
5.0/ 10
Patch Coverage33%
Open

2

Fixed

1

Get automatic notifications for all CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts vulnerabilities before they are exploited.

Vulnerability Records

3 records
Showing 1–3 of 3 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C