Vendors / Genie Wp Favicon Project Records 1 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Genie Wp Favicon Project records in CISA KEV No Genie Wp Favicon Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 30
The Genie WP Favicon WordPress plugin through 0.5.2 does not have CSRF in place when updating the favicon, which could allow attackers to make a logged in admin change it via a CSRF attack
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00549 · Published 2021-11-08 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 0 1 0 0
