The Dnesscarkey Use Any Font plugin versions up to 6.3.08 contain a CSRF vulnerability (CVE-2024-47305) that permits attackers to induce authenticated users to perform unintended actions via crafted requests. The vulnerability does not impact confidentiality or availability but may allow limited integrity impact. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

The vulnerability could allow attackers to perform unauthorized actions on behalf of authenticated users, potentially altering settings or configurations related to the Use Any Font plugin. There is no direct impact on confidentiality or availability. The overall impact is limited to integrity with medium severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens in requests or limiting plugin usage to trusted users. Monitor vendor communications for updates on patches or official mitigations.