WordPress Favicon Generator plugin < 2.1 - Arbitrary File Upload via CSRF vulnerability

Arbitrary File Upload via CSRF vulnerability discovered by Daniel Ruf in WordPress Plugin Favicon Generator versions 2.1...