https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T07:14:24.945539+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-19804 cnvd-2022-19804 2026-10-13T07:14:25.005737+00:00 cnvd-2022-19804 https://cve.radiocsirt.org/vuln/euvd-2026-24367 EUVD-2026-24367 2026-10-13T07:14:25.005768+00:00 EUVD-2026-24367 https://cve.radiocsirt.org/vuln/fkie_cve-2021-24977 fkie_cve-2021-24977 2026-10-13T07:14:25.005782+00:00

The Use Any Font | Custom Font Uploader WordPress plugin before 6.2.1 does not have any authorisation checks when assigning a font, allowing unauthenticated users to sent arbitrary CSS which will then be processed by the frontend for all users. Due to the lack of sanitisation and escaping in the backend, it could also lead to Stored XSS issues

 https://cve.radiocsirt.org/vuln/ghsa-vj7q-773h-8qqf GHSA-vj7q-773h-8qqf 2026-10-13T07:14:25.005810+00:00

The Use Any Font | Custom Font Uploader WordPress plugin before 6.2.1 does not have any authorisation checks when assigning a font, allowing unauthenticated users to sent arbitrary CSS which will then be processed by the frontend for all users. Due to the lack of sanitisation and escaping in the backend, it could also lead to Stored XSS issues

 https://cve.radiocsirt.org/vuln/gsd-2021-24977 gsd-2021-24977 2026-10-13T07:14:25.005826+00:00 gsd-2021-24977