CVE-2026-89417

Published 7 October 2026 · tracked since 8 October 2026

Description

The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 's' Search Parameter via comments-atom Feed in all versions up to, and including, 6.3.10 due to insufficient input sanitization and output escaping. This makes it possibl

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-107204 CRITICAL 9.8
• CVE-2026-106559 MEDIUM 6.3
• CVE-2026-106560 HIGH 7.1
• CVE-2026-106561 MEDIUM 5
• CVE-2026-106563 MEDIUM 5.3
• CVE-2026-106558 HIGH 8.8
• CVE-2026-106510 HIGH 7.7
• CVE-2026-106556 HIGH 7.7
• CVE-2025-70521 CRITICAL 9.8
• CVE-2025-70518 CRITICAL 10

→ Open the live CVE board · all tools