Icons Font Loader vulnerabilities

3 known vulnerabilities in Icons Font Loader from bPlugins. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Icons Font Loader: Unrestricted Upload of File with Dangerous Type

  CVE-2024-24714Feb 26, 2024bPlugins

  Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader.This issue affects Icons Font Loader: from n/a through 1.1.4.

• 8.8 High severity

  Icons Font Loader: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-46084Nov 6, 2023bPlugins

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bPlugins LLC Icons Font Loader allows SQL Injection.This issue affects Icons Font Loader: from n/a through 1.1.2.

• 7.2 High severity

  Icons Font Loader – Load Web Fonts and Icon…: Unrestricted Upload of File with Dangerous Type

  CVE-2023-5860Nov 2, 2023bPluginsEPSS 1.29%

  The Icons Font Loader plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with administrator-le