TI-2023-10038 CVE-2023-24416 · GHSA-hfqr-7mcf-f22qWordPress All In One Favicon Plugin <= 4.7 is vulnerable to Arbitrary File DeletionPriority LOW 31Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Arne Franken All In One Favicon.This issue affects All In One Favicon: from n/a through 4.7.CVSS 3.1MEDIUM 6.8· Network · High privileges · No interaction · EPSS 0.00777 · Published 2024-02-23 · No fix listed CWE-22