FontMeister is a WordPress plugin that allows you to easily manage your WordPress site’s fonts. FontMeister can be installed on a site directly or it can be installed as a plugin. There are two versions of the FontMeister plugin. The free version is for personal use only and does not allow for commercial use. The paid version allows for commercial use. There are no limits on the use of the free version, but the commercial version has a number of limitations. The commercial version of the FontMeister plugin has a limit of 5,000 characters per month. The free version of the FontMeister plugin has no such limitation. If a site using the commercial version of the FontMeister plugin is used for commercial purposes, the limitation of 5,000 characters per month will apply.

Vulnerability in the FontMeister plugin

The vulnerability in the FontMeister plugin allows for a malicious user to upload a malicious file to an affected site. The malicious file is then loaded into WordPress, which in turn executes it when the site is viewed by a visitor. When executed, the malicious code will send information about the website’s visitors back to a remote server. In short, what it does is provide access to private data from the website’s visitors.

Fontmeister – WordPress Plugin Remote Code Execution and File not found

There is a remote code execution and file not found vulnerability that affects two versions of the FontMeister plugin for WordPress. The first version, which is free to use, allows for 5,000 characters per month. This limit includes all characters in posts and pages on the site. The second version, which is commercial-use only, allows unlimited characters per month.

FontMeister Overview

FontMeister is a WordPress plugin that allows font management. The free version of the plugin has no limits on use, but the paid version of the plugin has a number of limitations.

Timeline

Published on: 10/11/2022 17:15:00 UTC
Last modified on: 10/13/2022 16:01:00 UTC

References