A vulnerability was found in Kallyas Plugin up to 4.21.0 on WordPress. It has been declared as problematic. This vulnerability affects the function
delete_font
of the component Path Validation Handler. The manipulation leads to denial of service.
This vulnerability was named CVE-2025-6989. The attack can be initiated remotely. There is no exploit available.