News and information from Font Awesome – the internet’s favorite icon set – mixed with musings and nerdery from the team behind it.

On Monday, March 9th, 2020 we were made aware of a security issue with our WordPress plugin. The vulnerable versions are 4.0.0-rc15 and 4.0.0-rc16. Version 4.0.0-rc15 was released Thursday, March 5th. The vulnerability exposes the Font Awesome API token and access token for users who have configured the plugin to use a kit. If compromised, these tokens could give an unauthorized person access to that user’s list of kits and kit settings.