Shortcode for Font Awesome
Shortcode for Font Awesome has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Shortcode for Font Awesome has a vendor fix available, so running the current release closes it.
All of these findings were reported by István Márton. Shortcode for Font Awesome is installed on roughly 700 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2023-0419Shortcode for Font Awesome <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Read the full analysisVulnerability Records
Shortcode for Font Awesome
Author
smgwebdesign
Insert Shortcode for Font Awesome in Editor. Here the pure Shortcode is generated. No Font Awesome Files are included. These must already be loaded in WordPress. Use [fa set="fas" icon="check" size="2x" color="#000000"] anywhere in WordPress The attributes Set, Icon, Size and Color can be Set as required. Set is set to “fas” by default. Icon is set to “check” by default. Size is set only when needed. Possible values are: 2x, 3x, 5x, 7x and 9x. Color is only set as hexadecimal value if required. IMPORTANT NOTES: This Plugin does not add Font Awesome Files, these must already be loaded in WordPress
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C