medium5.4
CVE-2022-40219
Cross-Site Request Forgery (CSRF) vulnerability in SedLex FavIcon Switcher plugin <= 1.2.11 at WordPress allows plugin settings change.
Impact
Cross-Site Request Forgery (CSRF) vulnerability in SedLex FavIcon Switcher plugin <= 1.2.11 at WordPress allows plugin settings change.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sedlex | Favicon-Switcher | through 1.2.11 |
Weakness classification
References
- NVD record
- CVE.org record
- https://patchstack.com/database/vulnerability/favicon-switcher/wordpress-favicon-switcher-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability
- https://wordpress.org/plugins/favicon-switcher/
- https://patchstack.com/database/vulnerability/favicon-switcher/wordpress-favicon-switcher-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability
- https://wordpress.org/plugins/favicon-switcher/