XServer vulnerabilities

Products

• CloudSecure WP Security 1
• TypeSquare Webfonts 1
• Xserver Migrator 1

Latest XServer CVEs

Newest publication first

1. CVE-2026-102387 WordPress Xserver Migrator plugin <= 1.6.6 - Sensitive Data Exposure vulnerability

   Published 2026-10-06

   High·CVSS 7.5

   Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 versions.

2. CVE-2026-42411 WordPress CloudSecure WP Security plugin <= 1.4.7 - Broken Authentication vulnerability

   Published 2026-06-15

   High·CVSS 8.1

   Unauthenticated Broken Authentication in CloudSecure WP Security <= 1.4.7 versions.

3. CVE-2024-43120 WordPress TypeSquare Webfonts plugin <= 2.0.7 - Broken Access Control vulnerability

   Published 2024-11-01

   Medium·CVSS 5.3

   Missing Authorization vulnerability in XSERVER Inc. TypeSquare Webfonts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TypeSquare Webfonts: from n/a through 2.0.7.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.