Favicon Generator, CVE-2024-7863
- CVE, Research URL
- Home page URL
- Application
- Published on
- Sep 13, 2024
- Research Description
- The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which could allow attackers to make logged in admin upload arbitrary files such as PHP on the server
- Affected versions
-
max 2.1.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| Favicon Generator (CVE-2024-7864) , Sep 15, 2024 |
| Favicon Generator (CVE-2024-7863) , Aug 29, 2024 |
| Favicon Generator (CVE-2024-7568) , Aug 25, 2024 |