PatchTheCVEffw vulnerabilities
Recent CVEs affecting ffw products. 3 tracked.
ffw has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-01-03. Highest priority: CVE-2021-24638 (score 62/100).
- CVE-2021-25021 MEDIUM 4.9 UPGRADE The OMGF | Host Google Fonts Locally WordPress plugin before 4.5.12 does not validate the cache directory sett
- CVE-2021-24639 HIGH 8.1 UPGRADE The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the
- CVE-2021-24638 CRITICAL 9.1 UPGRADE The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which
FAQ
How do I fix ffw vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ffw being exploited right now?
None of the tracked ffw CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ffw CVE should I patch first?
CVE-2021-24638 currently ranks highest (62/100): The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which.