Favicon Generator (CLOSED)

Favicon Generator (CLOSED) has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 9.2, and the most serious one scores 9.6 out of 10. Severity breakdown: 1 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (100%).

Every one of the 2 issues recorded for Favicon Generator (CLOSED) has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSCritical

9.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Favicon Generator (CLOSED) vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.6CVE-2024-7568

Favicon Generator <= 1.5 - Cross-Site Request Forgery to Arbitrary File Deletion

Read the full analysis

Vulnerability Records

2 records


2024-08-23 00:00	Favicon Generator <= 1.5 - Cross-Site Request Forgery to Arbitrary File Deletion Favicon Generator (CLOSED) <= 1.5	`CVE-2024-7568`	9.6 Critical	Marco Wotschka	Yes
2024-08-23 00:00	Favicon Generator <= 1.5 - Cross-Site Request Forgery to Arbitrary File Upload Favicon Generator (CLOSED) <= 1.5	`CVE-2024-7863`	8.8 High	Daniel Ruf	Yes

Showing 1–2 of 2 reports