Security Advisory

CVE-2024-7863

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-09-13 06:00:04

Last updated 2024-09-13 14:27:56

Assigner WPScan

State PUBLISHED

Description

The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which could allow attackers to make logged in admin upload arbitrary files such as PHP on the server

← Browse all CVEs View on cve.org ↗