CVE-2021-24674: Genie Wp Favicon Project Genie Wp Favicon

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The Genie WP Favicon WordPress plugin through 0.5.2 does not have CSRF in place when updating the favicon, which could allow attackers to make a logged in admin change it via a CSRF attack

Affected products

• Genie Wp Favicon Project Genie Wp Favicon: up to and including 0.5.2

Published 2021-11-08. Last modified 2026-06-17.