Pixeljar Favicon_generator
3 CVEs affecting Pixeljar Favicon_generator. Latest disclosed: 2024-09-13. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-7568 | Critical | 9.6 | 2024-08-24 | The Favicon Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5. This is due to missing or incorre… |
CVE-2024-7863 | Medium | 6.8 | 2024-09-13 | The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which could allow attackers to… |
CVE-2024-7864 | Medium | 6.5 | 2024-09-13 | The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admin_page_0() function, allowing attackers… |