CVE-2024-7568

CVE-2024-7568 (Favicon Generator for WordPress) affects the WordPress plugin Favicon Generator, version

CVE-2024-7864

The CVE concerns the WordPress Favicon Generator plugin (versions prior to 2.1). A lack of CSRF protection and insufficient path validation in the output_sub_admin_page_0() function allows an attacker to induce logged-in admins to delete arbitrary files on the server. Impact is high for integrity...

CVE-2024-7863

The Favicon Generator (CLOSED) WordPress plugin, in versions prior to 2.1 , is vulnerable to arbitrary file upload via Cross-Site Request Forgery (CSRF) . The root cause is a lack of file validation during uploads and missing CSRF checks. This flaw could allow an attacker to manipulate a logged-i...