WordPress plugin
Icons Font Loader – use web icons anywhere on your site, fast security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium1
- Low0
All Icons Font Loader – use web icons anywhere on your site, fast vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.6 | Authenticated(Administrator+) Arbitrary File Upload ≤1.1.4Update to 1.1.5 | CVE-2024-24714 | |
| High7.2 | Authenticated (Administrator+) Arbitrary File Upload ≤1.1.2Update to 1.1.3 | CVE-2023-5860 | |
| High8.8 | Authenticated (Subscriber+) SQL Injection ≤1.1.2Update to 1.1.3 | CVE-2023-46084 |
- Medium6.6Authenticated(Administrator+) Arbitrary File Upload
≤1.1.4Update to 1.1.5
- High7.2Authenticated (Administrator+) Arbitrary File Upload
≤1.1.2Update to 1.1.3
- High8.8Authenticated (Subscriber+) SQL Injection
≤1.1.2Update to 1.1.3
Icons Font Loader – use web icons anywhere on your site, fast: common questions
Does Icons Font Loader – use web icons anywhere on your site, fast have known vulnerabilities?
Yes. VulnCrest Radar lists 3 known vulnerabilities in Icons Font Loader – use web icons anywhere on your site, fast: 2 high, 1 medium. None are known to affect version null.
How do I check which version of Icons Font Loader – use web icons anywhere on your site, fast I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Icons Font Loader – use web icons anywhere on your site, fast vulnerability?
CVE-2024-24714, published Jan 31, 2024: Icons Font Loader <= 1.1.4 - Authenticated(Administrator+) Arbitrary File Upload. Severity: Medium (CVSS 6.6).
Is any Icons Font Loader – use web icons anywhere on your site, fast vulnerability listed in CISA KEV?
No. None of the known Icons Font Loader – use web icons anywhere on your site, fast vulnerabilities is currently listed in the CISA KEV catalog.