Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts 4.2

  • Severity: medium-risk
  • Status: Fixed
  • Publication: March 21, 2025

The CITS Support plugin for WordPress has a security vulnerability that allows unauthorized users to make changes to the plugin’s settings. This can happen if a site administrator clicks on a link that has been manipulated by the attacker. This vulnerability affects all versions of the plugin up to and including version 4.2. To fix this issue, make sure to update the plugin to the latest version.

Detected in:

CITS Support svg, webp Media and TTF,OTF File Upload, Use Custom Fonts fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.