WordPress plugin
Aria Font security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Aria Font vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤1.4No patch available | CVE-2025-32488 |
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤1.4No patch available
Aria Font: common questions
Does Aria Font have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Aria Font: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Aria Font I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Aria Font vulnerability?
CVE-2025-32488, published Apr 9, 2025: Aria Font <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting. Severity: Medium (CVSS 4.4).
Is any Aria Font vulnerability listed in CISA KEV?
No. None of the known Aria Font vulnerabilities is currently listed in the CISA KEV catalog.