cbcvebase.

Mlfactory Dsgvo Google Web Fonts Gdpr vulnerabilities

1 known vulnerability affecting mlfactory/dsgvo_google_web_fonts_gdpr.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-3535P2CRITICALCVSS 9.8≤ 1.12026-04-08
CVE-2026-3535 [CRITICAL] CWE-434 CVE-2026-3535: The DSGVO Google Web Fonts GDPR plugin for WordPress is vulnerable to arbitrary file upload due to m The DSGVO Google Web Fonts GDPR plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the `DSGVOGWPdownloadGoogleFonts()` function in all versions up to, and including, 1.1. The function is exposed via a `wp_ajax_nopriv_` hook, requiring no authentication. It fetches a user-supplied URL as a CSS file, ext
nvd
Mlfactory Dsgvo Google Web Fonts Gdpr vulnerabilities | cvebase