Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Pixeljar Clear all filters
TI-2024-10436 CVE-2024-11266 · GHSA-96h4-8m29-phmf

Geocache Stat Bar Widget <= 0.911 - Admin+ Stored XSS

Priority MEDIUM 55

The Geocache Stat Bar Widget WordPress plugin through 0.911 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 No fix listed CWE-79
TI-2024-07289 CVE-2024-7864 · GHSA-3rvq-3fc5-4w68

Favicon Generator < 2.1 - Arbitrary File Deletion via CSRF

Priority MEDIUM 62

The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admin_page_0() function, allowing attackers to make logged in admins delete arbitrary files on the serve…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00253 Published 2024-09-13 Fixed in 2.1 CWE-352
TI-2024-07288 CVE-2024-7863 · GHSA-fr4x-3m2g-jm28

Favicon Generator < 2.1 - Arbitrary File Upload via CSRF

Priority HIGH 70

The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which could allow attackers to make logged in admin upload arbitrary files such as PHP on t…

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.00292 Published 2024-09-13 Fixed in 2.1 CWE-352