Read the docs

Pixeljar

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Pixeljar records in CISA KEV

No Pixeljar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Favicon Generator 3 records HIGH Geocache Stat Bar Widget 1 record MEDIUM

Records

3 records in Favicon Generator · all components

TI-2024-07288 CVE-2024-7863 · GHSA-fr4x-3m2g-jm28

Favicon Generator < 2.1 - Arbitrary File Upload via CSRF

Priority HIGH 70

The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which could allow attackers to make logged in admin upload arbitrary files such as PHP on t…

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.00292 Published 2024-09-13 Fixed in 2.1 CWE-352
TI-2024-07289 CVE-2024-7864 · GHSA-3rvq-3fc5-4w68

Favicon Generator < 2.1 - Arbitrary File Deletion via CSRF

Priority MEDIUM 62

The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admin_page_0() function, allowing attackers to make logged in admins delete arbitrary files on the serve…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00253 Published 2024-09-13 Fixed in 2.1 CWE-352
Open these records in search →