WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TypeSquare Webfonts: from n/a through 2.0.7.