Archetyped vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Archetyped products: 2 record(s), with severity, exploitation and fixes.

Favicon Rotator 2

Exploited only (KEV) →

CVE-2026-5725 Medium · 6.1 CWE-79 Oct 10, 2026

Favicon Rotator <= 1.2.11 - Reflected Cross-Site Scripting via 'fvrt_' prefix

The Favicon Rotator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fvrt_' prefixed request parameters in all versions up to, and including, 1.2.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

CVE-2026-42649 High · 7.1 CWE-79 Jun 15, 2026

WordPress Favicon Rotator plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Favicon Rotator <= 1.2.11 versions.