CVE-2024-54402 MEDIUM

CVE-2024-54402: WordPress Arabic Webfonts plugin <= 1.4.6 - Broken Access Control vulnerability

Vendor Mohamed Abd Elhalim
Product Arabic Webfonts
Weakness CWE-862 · Missing authorization
Published December 16, 2024
Last update May 11, 2026
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

Missing Authorization vulnerability in Mohamed Abd Elhalim Arabic Webfonts arabic-webfonts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arabic Webfonts: from n/a through <= 1.4.6.

Key dates

02Disclosure timeline

December 16, 2024 CVE published
May 11, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-22445 WordPress Apimo Connector plugin <= 2.6.5.2 - Broken Access Control vulnerability CVE-2025-13812 GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress <= 7.6.1 - Missing Authorization to Authenticated (Subscriber+) Information Exposure CVE-2024-3627 Wheel of Life: Coaching and Assessment Tool for Life Coach <= 1.1.7 - Missing Authorization on Several AJAX Endpoints CVE-2024-12190 Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.17.3 - Missing Authorization to Authenticated (Subscriber+) Form Submission Disclosure CVE-2026-50026 Frappe: Lack of permissions checks in 'relink' and 'set_email_password' endpoints