CVE-2024-54417

Missing Authorization vulnerability in pixelgrade PixProof pixproof allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PixProof: from n/a through = 2.0.1...

CVE-2023-23702

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pixelgrade Comments Ratings plugin = 1.1.7 versions...

CVE-2023-45654

Cross-Site Request Forgery CSRF vulnerability in Pixelgrade Comments Ratings plugin = 1.1.7 versions...

CVE-2023-23704

Cross-Site Request Forgery CSRF vulnerability in Pixelgrade Comments Ratings plugin = 1.1.6 versions...

CVE-2023-27633

Cross-Site Request Forgery CSRF vulnerability in Pixelgrade Customify – Intuitive Website Styling plugin = 2.10.4 versions...

CVE-2023-45655

Cross-Site Request Forgery CSRF vulnerability in PixelGrade PixFields plugin = 0.7.0 versions...

CVE-2022-46844

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in PixelGrade PixFields plugin = 0.7.0 versions...

CVE-2025-39425

Cross-Site Request Forgery CSRF vulnerability in pixelgrade Style Manager style-manager allows Cross Site Request Forgery.This issue affects Style Manager: from n/a through = 2.2.7...

CVE-2025-39425

Cross-Site Request Forgery CSRF vulnerability in pixelgrade Style Manager style-manager allows Cross Site Request Forgery.This issue affects Style Manager: from n/a through = 2.2.7...

PT-2025-16992 · Pixelgrade · Style Manager

Name of the Vulnerable Software and Affected Versions: pixelgrade Style Manager versions 2.2.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an...

CVE-2025-31825

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in pixelgrade Category Icon category-icon allows Path Traversal.This issue affects Category Icon: from n/a through = 1.0.1...

CVE-2025-31819

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pixelgrade Nova Blocks nova-blocks.This issue affects Nova Blocks: from n/a through = 2.1.8...

CVE-2025-31825

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in pixelgrade Category Icon category-icon allows Path Traversal.This issue affects Category Icon: from n/a through = 1.0.1...

CVE-2025-31825

CVE-2025-31825 : Path Traversal in the Category Icon WordPress plugin allows authenticated authors to access restricted directories and download arbitrary files. Affected: Category Icon

PT-2025-14739 · Pixelgrade · Category Icon

Name of the Vulnerable Software and Affected Versions: Category Icon versions through 1.0.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in the pixelgrade Category Icon...

CVE-2025-31819

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pixelgrade Nova Blocks nova-blocks.This issue affects Nova Blocks: from n/a through = 2.1.8...

CVE-2025-31819 WordPress Nova Blocks by Pixelgrade plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pixelgrade Nova Blocks nova-blocks.This issue affects Nova Blocks: from n/a through = 2.1.8...

CVE-2025-31819

CVE-2025-31819 is a Cross-Site Scripting (XSS) vulnerability in Nova Blocks by Pixelgrade. The issue affects Nova Blocks versions up to 2.1.8 (and possibly earlier n/a ranges per entry). Root cause is improper neutralization of user-controlled input during web page generation, enabling injection ...

WordPress plugin Nova Blocks by Pixelgrade 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress...

PT-2025-14439 · Pixelgrade · Nova Blocks

Name of the Vulnerable Software and Affected Versions: Nova Blocks by Pixelgrade versions 2.1.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for potentially malicious scripts to be...