CVE-2026-95595highCWE-79

CVE-2026-95595: falha de alta gravidade em Fontsplugin Disable and Remove Google Fonts |…

WordPress Disable and Remove Google Fonts | GDPR & DSGVO friendly plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability

Publicada em 07 out 2026

18Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1

probabilidade de exploração

—

exploração observada

nãonenhuma fonte reporta

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fontsplugin Disable and Remove Google Fonts | GDPR & DSGVO friendly disable-remove-google-fonts allows Reflected XSS. This issue affects Disable and Remove Google Fonts | GDPR & DSGVO friendly: from n/a through 2.0.2.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Produtos afetados

Fontsplugin · Disable and Remove Google Fonts | GDPR & DSGVO friendly

Referências

https://patchstack.com/database/wordpress/plugin/disable-remove-google-fonts/vulnerability/wordpress-disable-and-remove-google-fonts-gdpr-dsgvo-friendly-plugin-2-0-2-cross-site-scripting-xss-vulnerability?_s_id=cve