Omgf | Host Google Fonts Locally
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:omgf_|_host_google_fonts_locally:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Omgf | Host Google Fonts Locally (0f99bc67-71ce-539f-a176-3926fdde5c9c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-25021 |
vulnerable | 2026-06-08 05:30:39.814262 |
OMGF < 4.5.12 - Admin+ Arbitrary Folder Deletion via Path Traversal
The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory setting, allowing high privilege users to use a path traversal vector and delete arbitrary folders when uninstalling the plugin
Published: 2022-01-03T12:49:14.000Z
Updated: 2024-08-03T19:49:14.646Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24639 |
vulnerable | 2026-06-08 05:30:38.920689 |
OMGF < 4.5.4 - Subscriber+ Arbitrary File/Folder Deletion
The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any authenticated users to delete arbitrary files or folders on the server.
Published: 2021-09-20T10:06:45.000Z
Updated: 2024-08-03T19:35:20.417Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24638 |
vulnerable | 2026-06-08 05:30:38.919638 |
OMGF < 4.5.4 - Unauthenticated Path Traversal in REST API
The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows unauthenticated users to perform path traversal and overwrite arbitrary CSS file with Google Fonts CSS, or download fonts uploaded on Google Fonts website.
Published: 2021-09-20T10:06:43.000Z
Updated: 2024-08-03T19:35:20.317Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.