WF-4783eff5-b7cf-4342-b762-85f745c38ec8-font-awesome
Font Awesome 4.0.0-rc15 and 4.0.0-rc16 - API Token Exposure
mediumExposure of Sensitive Information Through Data Queries
6.5
CVSS Score
6.5
CVSS Score
medium
Severity
4.0.0-rc17
Patched in
1413d
Time to patch
Description
The Font Awesome plugin for WordPress versions 4.0.0-rc15 and 4.0.0-rc16 are vulnerable to API Token Exposure. The vulnerability exposes the Font Awesome API token and access token for users who have configured the plugin to use a kit. If compromised, these tokens could give an unauthorized person access to that user’s list of kits and kit settings.
CVSS Vector Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NAttack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Low
Confidentiality
Low
Integrity
None
Availability
Technical Details
Affected versions
>=4.0.0-rc15 <=4.0.0-rc15PublishedMarch 11, 2020
Last updatedJanuary 22, 2024
Affected pluginfont-awesome
Check if your site is affected.
Run a free security audit to detect vulnerable plugins, outdated versions, and misconfigurations.