Description
The CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2. This is due to missing or incorrect nonce validation on the cits_assign_fonts_tab() function. This makes it possible for unauthenticated attackers to delete font assignments via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Problem types
CWE-352 Cross-Site Request Forgery (CSRF)
Product status
Any version
Timeline
| 2025-03-21: | Disclosed |
Credits
lucky_buddy
References
www.wordfence.com/...-241c-4060-a1e1-a13f92421fef?source=cve
plugins.trac.wordpress.org/...includes/cits-custom-fonts.php