Beveiligingsadvies

CVE-2024-7864

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-09-13 06:00:04

Laatst bijgewerkt 2024-09-13 15:41:24

Toegewezen door WPScan

CVSS-score 6.5

Status PUBLISHED

Beschrijving

The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admin_page_0() function, allowing attackers to make logged in admins delete arbitrary files on the server

← Alle CVE's bekijken Bekijk op cve.org ↗