Pixeljar Favicon Generator — known CVE vulnerabilities

Every CVE whose affected-product data names Pixeljar Favicon Generator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-7568 — CVSS 9.6 (critical): The Favicon Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5. This is due…
• CVE-2024-7863 — CVSS 6.8 (medium): The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which…
• CVE-2024-7864 — CVSS 6.5 (medium): The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admin_page_0()…