CVE-2024-7568

CVE-2024-7568 (Favicon Generator for WordPress) affects the WordPress plugin Favicon Generator, version

CVE-2024-7863

The Favicon Generator (CLOSED) WordPress plugin in versions prior to 2.1 is vulnerable to an arbitrary file upload due to a lack of file validation and missing CSRF checks . An attacker can leverage these flaws to trick a logged-in administrator into uploading arbitrary files, such as PHP files, ...

CVE-2024-7864

The CVE concerns the WordPress Favicon Generator plugin (versions prior to 2.1). A lack of CSRF protection and insufficient path validation in the output_sub_admin_page_0() function allows an attacker to induce logged-in admins to delete arbitrary files on the server. Impact is high for integrity...