CVE WATCH / VULNERABILITY DETAIL
CVE-2026-97397
HIGHCVSS 7.2NVD feed
Published 4 November 2026 · tracked since 4 November 2026
Description
The Remove Google Fonts – Disable, Block, or Replace with Bunny Fonts for GDPR Compliance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Field via Regex-Mangled Output Buffer in all versions up to, and including, 1.7 due to insufficient input sanitization and output es
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-59267 HIGH 7.8
- CVE-2026-114456 MEDIUM 6.5
- CVE-2026-121925 MEDIUM 6.6
- CVE-2026-104799 HIGH 8.8
- CVE-2026-90626 HIGH 7.3
- CVE-2026-90627 MEDIUM 5.5
- CVE-2026-90628 HIGH 7.3
- CVE-2026-90629 HIGH 7.3
- CVE-2026-90634 HIGH 7.3
- CVE-2026-90624 HIGH 7.3