CVE-2026-4657
6.4
/ 中危
2026-09-10
04h18 +00:00
04h18 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
The Easy Google Fonts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the control_selectors meta field in all versions up to, and including, 2.0.4. This is due to the plugin registering the control_selectors meta field with show_in_rest enabled but without a sanitize_callback, and subsequently outputting this unsanitized data directly into