Advisories · Technology

archetyped Favicon Rotator.

Every CVE that names archetyped Favicon Rotator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-5725 CVE record

CVSS 6.1 Medium

Favicon Rotator <= 1.2.11 - Reflected Cross-Site Scripting via 'fvrt_' prefix
- archetyped Favicon Rotator
- Cross-site scripting (XSS)
Not analysed yet 10 Oct 2026
CVE-2026-42649 CVE record

CVSS 7.1 High

WordPress Favicon Rotator plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability
- Archetyped Favicon Rotator
- Cross-site scripting (XSS)
Not analysed yet 15 Jun 2026
CVE-2024-28001 CVE record

CVSS 7.1 High

WordPress Favicon Rotator plugin <= 1.2.10 - Reflected Cross Site Scripting (XSS) vulnerability
- Archetyped Favicon Rotator
- Cross-site scripting (XSS)
Not analysed yet 28 Mar 2024