Pixeljar - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2025-05-15.

Products

CVE-2024-11266 - CVSS 4.8 (medium), 2025-05-15: The Geocache Stat Bar Widget WordPress plugin through 0.911 does not sanitise and escape some of its settings, which could allow high privilege users such as…
CVE-2024-7864 - CVSS 6.5 (medium), 2024-09-13: The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not have CSRF and path validation in the output_sub_admin_page_0() function, allowing…
CVE-2024-7863 - CVSS 8.1 (high), 2024-09-13: The Favicon Generator (CLOSED) WordPress plugin before 2.1 does not validate files to be uploaded and does not have CSRF checks, which could allow attackers…
CVE-2024-7568 - CVSS 9.6 (critical), 2024-08-24: The Favicon Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5. This is due to missing or…