Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 11:34:56 +0000 CVE-2021-24935 — WP Google Fonts < 3.1.5 - Reflected Cross-Site Scripting https://cve.radiocsirt.org/vuln/cve-2021-24935 <p><strong>Affected:</strong> Unknown WP Google Fonts</p> <p>The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated user) before outputing them in attributes, leading Reflected Cross-Site Scripting issues</p> <p><strong>Affected:</strong> Unknown WP Google Fonts</p> <p>The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated user) before outputing them in attributes, leading Reflected Cross-Site Scripting issues</p> https://cve.radiocsirt.org/vuln/cve-2021-24935