attachment_file_icons vulnerabilities

1 known vulnerability in attachment_file_icons from Praveenrajan. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Attachment File Icons (AF Icons): Cross-Site Request Forgery

  CVE-2024-6309Jul 9, 2024Praveen-rajan

  The Attachment File Icons (AF Icons) plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 1.3. This is due to missing nonce validation in the 'afi_overview' function and missing file type v