better font awesome vulnerabilities and fixes

Q: How do I fix better font awesome vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Q: Is better font awesome being exploited right now?

None of the tracked better font awesome CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Q: Which better font awesome CVE should I patch first?

CVE-2022-4512 currently ranks highest (38/100): The Better Font Awesome WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attri.

Recent CVEs affecting better font awesome, with upgrade or downgrade steps. 2 tracked.

Also searched as: betterfontawesome.

better font awesome has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-02-13. Highest priority: CVE-2022-4512 (score 38/100).

CVE-2022-4512 MEDIUM 5.4 UPGRADE The Better Font Awesome WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attri
CVE-2022-37405 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Mickey Kay's Better Font Awesome plugin <= 2.0.1 at WordPre

FAQ

How do I fix better font awesome vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is better font awesome being exploited right now?

None of the tracked better font awesome CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which better font awesome CVE should I patch first?

CVE-2022-4512 currently ranks highest (38/100): The Better Font Awesome WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attri.

← Back to latest CVEs