Custom Fonts – Host Your Fonts Locally vulnerabilities

Product

Custom Fonts – Host Your Fonts Locally

by brainstormforce · last CVE Jan 20, 2026

CVEs

On KEV

5.4

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 2Low 0

Severity

Exploitation

Watch

Add Custom Fonts – Host Your Fonts Locally to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-1332	5.4	0%	May 24	Custom Fonts – Host Your Fonts Locally <= 2.1.4 - Authenticated (Author+) Stored Cross-Site Scripting Affected: through 2.1.4
CVE-2025-14351	5.3	0%	Jan 20	Custom Fonts – Host Your Fonts Locally <= 2.1.16 - Missing Authorization to Unauthenticated Font Deletion Affected: through 2.1.16