TI-2021-06956 CVE-2021-24674 · GHSA-mhcf-w95r-xjvr
Genie WP Favicon <= 0.5.2 - Arbitrary Favicon Change via CSRF
Priority LOW 30
The Genie WP Favicon WordPress plugin through 0.5.2 does not have CSRF in place when updating the favicon, which could allow attackers to make a logged in admin change it via a CSRF attack