Threat database

5 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.1	EPSS 0.2%	CVE-2026-5725Favicon Rotator · Cross-site Scripting Medium6.1EPSS 0.2%2026-10-10CVE Database V5CVE-2026-5725 The Favicon Rotator plugin for WordPress contains a reflected cross-site scripting (XSS) vulnerability in all versions up to and including 1.2.11. This vulnerability arises from insufficient sanitization and escaping of 'fvrt_' prefixed request parameters, allowing unauthenticated attackers to inject arbitrary scripts. Successful exploitation requires tricking a user into clicking a crafted link, leading to script execution in the user's browser. EPSS 0.2%Vulnerability archetyped #cwe-79 #ghsa-m5rr-w32q-pc8f	CVE Database V5	2026-10-10
High	7.1	EPSS 0.3%	CVE-2026-42649Favicon Rotator · Cross-site Scripting High7.1EPSS 0.3%2026-06-15CVE Database V5CVE-2026-42649 Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions. EPSS 0.3%Vulnerability Archetyped #cwe-79	CVE Database V5	2026-06-15
High	7.1	EPSS 0.3%	CVE-2024-32570Cornerstone · Cross-site Scripting High7.1EPSS 0.3%2024-04-18CVE Database V5CVE-2024-32570 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Archetyped Cornerstone allows Reflected XSS.This issue affects Cornerstone: from n/a through 0.8.0. EPSS 0.3%Vulnerability Archetyped #cwe-79	CVE Database V5	2024-04-18
High	7.1	EPSS 0.4%	CVE-2024-28001Favicon Rotator · Cross-site Scripting High7.1EPSS 0.4%2024-03-28CVE Database V5CVE-2024-28001 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Archetyped Favicon Rotator allows Reflected XSS.This issue affects Favicon Rotator: from n/a through 1.2.10. EPSS 0.4%Vulnerability Archetyped #cwe-79	CVE Database V5	2024-03-28
High	7.1	EPSS 0.4%	CVE-2024-28002Cornerstone · Cross-site Scripting High7.1EPSS 0.4%2024-03-28CVE Database V5CVE-2024-28002 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Archetyped Cornerstone allows Reflected XSS.This issue affects Cornerstone: from n/a through 0.8.0. EPSS 0.4%Vulnerability Archetyped #cwe-79	CVE Database V5	2024-03-28

Showing 1–5 of 5 results