Vulnerabilities / OMGF
OMGF vulnerabilities
Advisories WPSec published for OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy.. Other sources may list more. Its attack surface: OMGF on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-01 | WPSEC-2026-0040 | OMGF <= 6.3.11 - Authenticated (Contributor+) Path Traversal via Font Family Name | Low 3.1 | 6.3.12 |
| 2026-10-01 | WPSEC-2026-0039 | OMGF <= 6.3.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Font Download Error Notices | Medium 4.4 | 6.3.12 |
| 2026-10-01 | WPSEC-2026-0038 | OMGF <= 6.3.11 - Authenticated (Contributor+) Server-Side Request Forgery via Font Stylesheet Link Processing | Medium 4.9 | 6.3.12 |
License: CC BY 4.0