Pixeljar

Favicon Generator

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2024-7863

Exploit
  • EPSS 0.2%
  • Veröffentlicht 13.09.2024 06:15:15
  • Zuletzt bearbeitet 27.09.2024 21:27:07

The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which could allow attackers to make logged in admin upload arbitrary files such as PHP on the server

6.5

CVE-2024-7864

Exploit
  • EPSS 0.16%
  • Veröffentlicht 13.09.2024 06:15:15
  • Zuletzt bearbeitet 27.09.2024 21:26:50

The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admin_page_0() function, allowing attackers to make logged in admins delete arbitrary files on the server

8.1

CVE-2024-7568

  • EPSS 0.43%
  • Veröffentlicht 24.08.2024 02:15:04
  • Zuletzt bearbeitet 27.09.2024 00:41:18

The Favicon Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5. This is due to missing or incorrect nonce validation on the output_sub_admin_page_0 function. This makes it possible for una...