Not rated
CVE-2021-24674 The Genie WP Favicon WordPress plugin through 0.5.2 does not have CSRF in place when updating the favicon, which could…
Description
The Genie WP Favicon WordPress plugin through 0.5.2 does not have CSRF in place when updating the favicon, which could allow attackers to make a logged in admin change it via a CSRF attack
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Genie WP Favicon | 0.5.2 | No fix stated |