← Back to CVE List

CVE-2024-7863

Published: 2024-09-13T06:15Z
Last Modified: 2024-09-27T21:27Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which could allow attackers to make logged in admin upload arbitrary files such as PHP on the server > MITRE Terms of Use apply – see LICENSE‑MITRE.txt