Favicon by RealFaviconGenerator
Favicon by RealFaviconGenerator has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2026; all 5 are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 2 high.
The most common weakness is Cross-Site Scripting, behind 4 of the records (80%). Other recurring categories include Cross-Site Request Forgery (CSRF).
Every one of the 5 issues recorded for Favicon by RealFaviconGenerator has a vendor fix available, so running the current release closes all known holes.
5 independent researchers contributed these findings, one record each. Favicon by RealFaviconGenerator is installed on roughly 200,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2026-42754Favicon by RealFaviconGenerator <= 1.3.46 - Unauthenticated Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Favicon by RealFaviconGenerator
Author
phbernard
Generate and setup a favicon for desktop browsers, iPhone/iPad, Android devices, Windows 8 tablets and more. In a matter of seconds, design an icon that looks great on all major platforms. Favicon is not just a single favicon.ico file dropped in the middle of your site. Nowadays, with so many different platforms and devices, you need a bunch of pictures to get the job done. With RealFaviconGenerator, generate all the icons you need for desktop browsers, iPhone/iPad, Android devices, Windows 8 devices, and more. iOS devices use a high resolution Apple touch icon to illustrate bookmarks and home screen shortcuts. A first generation iPhone needs a 57×57 picture, whereas a brand new iPad with Retina screen looks for a 152×152 picture. Android Chrome also use these pictures if it finds them. Windows 8 takes another route with a dedicated set of icons and HTML declarations. Favicon is not only a matter of pictures with different resolutions. The various platforms coms with different UI guidelines. For example, the classic desktop favicons often use transparency. But iOS requires opaque icons. And Windows 8 has its own recommendations. Save hours of research and image edition with RealFaviconGenerator and its companion plugin. In a matter of seconds, you setup a favicon compatible with: Windows (IE, Chrome, Firefox, Opera, Safari) Mac (Safari, Chrome, Firefox, Opera, Camino) iOS (Safari, Chrome, Coast) Android (Chrome, Firefox) Surface (IE) And more We take compatibility very seriously. See http://realfavicongenerator.net/favicon_compatibility for the full list. This plugin relies on RealFaviconGenerator when you create your favicon. Browse its terms of service and privacy policy for additional information. Localization English (en_EN) by Philippe Bernard French (fr_FR) by Philippe Bernard Swedish (sv_SE) by Linus Wileryd Brazilian Portuguese (pt_BR) by Marcelo Volgarini, Criação de Sites Dutch (nl_NL) by Axel Vanderhaeghen Danish (da_DK) by Alexander Leo-Hansen Czech (cs_CZ) by an anonymous translator Polish (pl_PL) by Maciej Gryniuk Russian (ru_RU) by Natasha Diatko, UStarCash Indonesian (id_ID) by Jordan Silaen
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C