CVE-2024-33925 – WordPress Embed Google Fonts plugin <= 3.1.0 - Broken Access Control vulnerability

https://notcve.org/view.php?id=CVE-2024-33925

Missing Authorization vulnerability in Adrian Mörchen Embed Google Fonts.This issue affects Embed Google Fonts: from n/a through 3.1.0. Vulnerabilidad de autorización faltante en Adrian Mörchen Embed Google Fonts. Este problema afecta a Embed Google Fonts: desde n/a hasta 3.1.0. The Embed Google Fonts plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 3.1.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action. • https://patchstack.com/database/vulnerability/embed-google-fonts/wordpress-embed-google-fonts-plugin-3-1-0-broken-access-control-vulnerability?_s_id=cve • CWE-862: Missing Authorization •