SAKURA Internet Inc. vulnerabilities

Products

• TS Webfonts for SAKURA 2
• TS Webfonts for さくらのレンタルサーバ 1

Latest SAKURA Internet Inc. CVEs

Newest publication first

1. CVE-2023-34169 WordPress TS Webfonts for さくらのレンタルサーバ Plugin <= 3.1.2 is vulnerable to Broken Access Control

   Published 2023-11-09

   High·CVSS 8.8 EPSS 0.31%

   Cross-Site Request Forgery (CSRF) vulnerability in SAKURA Internet Inc. TS Webfonts for さくらのレンタルサーバ plugin <= 3.1.2 versions.

2. CVE-2023-32625 TS Webfonts for SAKURA <= 3.1.2 - Cross-Site Request Forgery

   Published 2023-07-21

   Medium·CVSS 4.3 EPSS 0.31%

   Cross-site request forgery (CSRF) vulnerability in TS Webfonts for SAKURA 3.1.2 and earlier allows a remote unauthenticated attacker to hijack the authentication of a user and to change settings by having a user view a malicious page.

3. CVE-2023-32624 TS Webfonts for SAKURA <= 3.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting

   Published 2023-07-21

   Medium·CVSS 6.1 EPSS 0.60%

   Cross-site scripting vulnerability in TS Webfonts for SAKURA 3.1.0 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.