Extension WordPress
Vulnérabilités Favicon by RealFaviconGenerator
Cette page rassemble les failles publiées pour Favicon by RealFaviconGenerator, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Favicon by RealFaviconGenerator
5 fiches
Favicon by RealFaviconGenerator <= 1.3.46 – Unauthenticated Stored Cross-Site Scripting
The Favicon by RealFaviconGenerator plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.3.46 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary…
*-1.3.46
1.3.47
30/05/2026
Favicon <= 1.3.29 – Cross-Site Request Forgery to Notice Dismissal
The Favicon plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.29. This is due to missing or incorrect nonce validation on the process_ignored_notice() function. This makes it possible for unauthenticated attackers…
*-1.3.29
1.3.30
10/04/2024
Favicon by RealFaviconGenerator <= 1.3.22 – Reflected Cross-Site Scripting
The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the json_result_url parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cross-Site Scripting issue
[*, 1.3.23)
1.3.23
21/03/2022
Favicon by RealFaviconGenerator <= 1.3.21 – Reflected Cross-Site Scripting
The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting (XSS) which is executed in the context of…
[*, 1.3.21)
1.3.21
27/07/2021
Favicon by RealFaviconGenerator <= 1.2.12 – Reflected Cross-Site Scripting
The Favicon by RealFaviconGenerator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘json_result_url’ parameter in versions before 1.2.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject…
[*, 1.2.13)
1.2.13
01/04/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.