Read the docs

Pixeljar

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Pixeljar records in CISA KEV

No Pixeljar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Favicon Generator 3 records HIGH Geocache Stat Bar Widget 1 record MEDIUM

Records

4 records

TI-2024-07288 CVE-2024-7863 · GHSA-fr4x-3m2g-jm28

Favicon Generator < 2.1 - Arbitrary File Upload via CSRF

Priority HIGH 70

The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which could allow attackers to make logged in admin upload arbitrary files such as PHP on t…

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.00292 Published 2024-09-13 Fixed in 2.1 CWE-352
TI-2024-07289 CVE-2024-7864 · GHSA-3rvq-3fc5-4w68

Favicon Generator < 2.1 - Arbitrary File Deletion via CSRF

Priority MEDIUM 62

The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admin_page_0() function, allowing attackers to make logged in admins delete arbitrary files on the serve…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00253 Published 2024-09-13 Fixed in 2.1 CWE-352
TI-2024-10436 CVE-2024-11266 · GHSA-96h4-8m29-phmf

Geocache Stat Bar Widget <= 0.911 - Admin+ Stored XSS

Priority MEDIUM 55

The Geocache Stat Bar Widget WordPress plugin through 0.911 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 No fix listed CWE-79
Open these records in search →