Cross-site Scripting Vulnerability in Font Awesome WP by Farjana55
CVE-2025-26567

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Font Awesome WP
Vendor
CVE Published:
13 February 2025

What is CVE-2025-26567?

The Font Awesome WP plugin by Farjana55 is susceptible to a Cross-site Scripting (XSS) vulnerability, where inadequate sanitization of input can lead to DOM-based XSS attacks. This vulnerability could allow attackers to inject malicious scripts, potentially compromising user interactions and overall site integrity. All versions up to 1.0 are affected, posing a significant risk for WordPress websites utilizing this plugin.

Affected Version(s)

Font Awesome WP <= 1.0

References

https://patchstack.com/database/wordpress/plugin/font-awe...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

muhammad yudha (Patchstack Alliance)
.