Medium · 5.4 CVE-2022-40219 EUVD-2022-43517GHSA-h697-5q9g-45h6

WordPress FavIcon Switcher plugin <= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability

Published Sep 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in SedLex FavIcon Switcher plugin <= 1.2.11 at WordPress allows plugin settings change.

Vendor	Product	Affected	Fixed
SedLex	FavIcon Switcher (WordPress plugin)	<= 1.2.11 – ≤ 1.2.11	—