Lucene search
WPScanCVELIST:CVE-2024-7863HistorySep 13, 2024 - 6:00 a.m.
CVE-2024-7863 Favicon Generator < 2.1 - Arbitrary File Upload via CSRF
2024-09-1306:00:04
WPScan
www.cve.org
4
cve-2024-7863
favicon generator
arbitrary file upload
csrf
wordpress_plugin
EPSS
0.001
Percentile
19.8%
The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which could allow attackers to make logged in admin upload arbitrary files such as PHP on the server
CNA Affected
[
{
"vendor": "Unknown",
"product": "Favicon Generator (CLOSED)",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "2.1"
}
],
"defaultStatus": "unaffected"
}
]Related
vulnrichment
vulnrichment
CVE-2024-7863 Favicon Generator < 2.1 - Arbitrary File Upload via CSRF
2024-09-13 06:00:04
cve
cve
CVE-2024-7863
2024-09-13 06:15:15
nvd
nvd
CVE-2024-7863
2024-09-13 06:15:15
wordfence
wordfence