[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fB3dbxMg6rXZ5JsuZQ0SEJ8n0m9LcDu1l-6sGVcWkvGA":3},{"id":4,"url_slug":5,"title":6,"description":7,"plugin_slug":8,"theme_slug":9,"affected_versions":10,"patched_in_version":11,"severity":12,"cvss_score":13,"cvss_vector":14,"vuln_type":15,"published_date":16,"updated_date":17,"references":18,"days_to_patch":20,"patch_diff_files":21,"patch_trac_url":22},"WF-7c1e005f-c0f1-4dff-928b-18919f117048-tk-google-fonts","tk-google-fonts-gdpr-compliant-authorization-bypass","TK Google Fonts GDPR Compliant \u003C= 2.2.7 - Authorization Bypass","The TK Google Fonts GDPR Compliant plugin for wordPress is vulnerable to unauthenticated plugin settings update in versions up to, and including, 2.2.7 due to missing capability checks and missing nonce checks on the `tk_google_fonts_add_font` function that can be called by unauthenticated users via the `wp_ajax_nopriv_tk_google_fonts_add_font` AJAX action.","tk-google-fonts",null,"\u003C=2.2.7","2.2.8","high",7.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L","Missing Authorization","2023-05-05 00:00:00","2024-01-22 19:56:02",[19],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F7c1e005f-c0f1-4dff-928b-18919f117048?source=api-prod",263,[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Ftk-google-fonts%2Ftags%2F2.2.7&new_path=%2Ftk-google-fonts%2Ftags%2F2.2.8"]