Font Awesome, c7c83cad06dd49b30f023f84c2fcfaf603bb8ef0
- CVE, Research URL
- Home page URL
- Application
- Published on
- Mar 11, 2020
- Research Description
- Font Awesome [font-awesome] >= 4.0.0-rc15 - <= 4.0.0-rc16 Font Awesome 4.0.0-rc15 and 4.0.0-rc16 - API Token Exposure The Font Awesome plugin for WordPress versions 4.0.0-rc15 and 4.0.0-rc16 are vulnerable to API Token Exposure. The vulnerability exposes the Font Awesome API token and access token for users who have configured the plugin to use a kit. If compromised, these tokens could give an unauthorized person access to that user’s list of kits and kit settings.
- Affected versions
-
Min 4.0.0-rc15, max 4.0.0-rc16.
- Status
-
vulnerable