CVE-2023-24416

creationtimestamp| type| source ---|---|--- 2024-02-23 13:26:45+00:00| seen| https://t.me/ctinow/191714 2024-02-23 13:26:48+00:00| seen| https://t.me/ctinow/191717...

CVE-2023-24416

CVE-2023-24416 affects WordPress plugin All In One Favicon (versions

CVE-2023-24416 WordPress All In One Favicon Plugin <= 4.7 is vulnerable to Arbitrary File Deletion

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Arne Franken All In One Favicon.This issue affects All In One Favicon: from n/a through 4.7...

WordPress All In One Favicon Plugin <= 4.7 is vulnerable to Arbitrary File Deletion

Software All In One Favicon Type Plugin Vulnerable versions = 4.7 Fixed in 4.8 OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2023-24416 Patch priority Low CVSS severity Low 6.8 Developer Claim ownership PSID b9929b1d7eae Credits Mika Required privilege...