TK Google Fonts

TK Google Fonts has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2023; all 5 are fixed as of October 2026. Their average CVSS score is 5.7, and the most serious one scores 7.3 out of 10. Severity breakdown: 0 critical and 1 high. 2023 was the busiest year with 4 disclosures.

The most common weakness is Missing Authorization, behind 4 of the records (80%). Other recurring categories include Cross-Site Scripting.

Every one of the 5 issues recorded for TK Google Fonts has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Rafie Muhammad.

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all TK Google Fonts vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.3

TK Google Fonts GDPR Compliant <= 2.2.7 - Authorization Bypass

Read the full analysis

Vulnerability Records

5 records


2023-10-24 00:00	TK Google Fonts GDPR Compliant <= 2.2.11 - Missing Authorization to Font Addition TK Google Fonts <= 2.2.11	`CVE-2023-5823`	4.3 Medium	Anonymous	Yes
2023-10-24 00:00	TK Google Fonts GDPR Compliant <= 2.2.11 - Missing Authorization to Font Deletion TK Google Fonts <= 2.2.11	`CVE-2023-5823`	4.3 Medium	Anonymous	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get TK Google Fonts <= 2.2.10	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2023-05-05 00:00	TK Google Fonts GDPR Compliant <= 2.2.7 - Authorization Bypass TK Google Fonts <= 2.2.7	`N/A`	7.3 High	Anonymous	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks TK Google Fonts < 2.2.1	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes

Showing 1–5 of 5 reports