PatchTheCVEbetter font awesome project vulnerabilities
Recent CVEs affecting better font awesome project products. 2 tracked.
better font awesome project has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-02-13. Highest priority: CVE-2022-4512 (score 38/100).
- CVE-2022-4512 MEDIUM 5.4 UPGRADE The Better Font Awesome WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attri
- CVE-2022-37405 MEDIUM 4.3 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in Mickey Kay's Better Font Awesome plugin <= 2.0.1 at WordPre
FAQ
How do I fix better font awesome project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is better font awesome project being exploited right now?
None of the tracked better font awesome project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which better font awesome project CVE should I patch first?
CVE-2022-4512 currently ranks highest (38/100): The Better Font Awesome WordPress plugin before 2.0.4 does not validate and escape some of its shortcode attri.