Lucene search
+L

109 matches found

RedhatCVE
RedhatCVE
•added 2025/06/11 4:03 p.m.•21 views

CVE-2025-31039

Improper Restriction of XML External Entity Reference vulnerability in pixelgrade Category Icon category-icon allows XML Entity Linking.This issue affects Category Icon: from n/a through = 1.0.3...

9.1CVSS5.9AI score0.00529EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/09 4:15 p.m.•20 views

CVE-2025-31039

Improper Restriction of XML External Entity Reference vulnerability in pixelgrade Category Icon category-icon allows XML Entity Linking.This issue affects Category Icon: from n/a through = 1.0.3...

9.1CVSS0.00529EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:12 a.m.•18 views

CVE-2024-54417

Missing Authorization vulnerability in pixelgrade PixProof pixproof allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects PixProof: from n/a through = 2.0.1...

5.3CVSS7.2AI score0.00538EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:12 a.m.•21 views

CVE-2023-23702

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Pixelgrade Comments Ratings plugin = 1.1.7 versions...

5.9CVSS6.6AI score0.00316EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:02 a.m.•15 views

CVE-2023-45654

Cross-Site Request Forgery CSRF vulnerability in Pixelgrade Comments Ratings plugin = 1.1.7 versions...

8.8CVSS8.3AI score0.00259EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 2:41 a.m.•26 views

CVE-2023-23704

Cross-Site Request Forgery CSRF vulnerability in Pixelgrade Comments Ratings plugin = 1.1.6 versions...

8.8CVSS8.3AI score0.00256EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:26 a.m.•15 views

CVE-2023-27633

Cross-Site Request Forgery CSRF vulnerability in Pixelgrade Customify – Intuitive Website Styling plugin = 2.10.4 versions...

8.8CVSS8AI score0.00295EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:19 a.m.•26 views

CVE-2023-45655

Cross-Site Request Forgery CSRF vulnerability in PixelGrade PixFields plugin = 0.7.0 versions...

8.8CVSS7AI score0.0026EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:49 a.m.•22 views

CVE-2022-46844

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in PixelGrade PixFields plugin = 0.7.0 versions...

6.5CVSS6.8AI score0.00361EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/25 10:52 p.m.•45 views

CVE-2025-39425

Cross-Site Request Forgery CSRF vulnerability in pixelgrade Style Manager style-manager allows Cross Site Request Forgery.This issue affects Style Manager: from n/a through = 2.2.7...

4.3CVSS7.2AI score0.00168EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/17 4:15 p.m.•34 views

CVE-2025-39425

Cross-Site Request Forgery CSRF vulnerability in pixelgrade Style Manager style-manager allows Cross Site Request Forgery.This issue affects Style Manager: from n/a through = 2.2.7...

4.3CVSS0.00168EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/17 12:00 a.m.•9 views

CVE-2025-39425: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in pixelgrade Style Manager style-manager allows Cross Site Request Forgery.This issue affects Style Manager: from n/a through = 2.2.7...

4.3CVSS8.6AI score0.00168EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/17 12:00 a.m.•17 views

PT-2025-16992 · Pixelgrade · Style Manager

Name of the Vulnerable Software and Affected Versions: pixelgrade Style Manager versions 2.2.7 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an...

4.3CVSS5.5AI score0.00168EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/04/05 2:30 p.m.•19 views

CVE-2025-31825

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in pixelgrade Category Icon category-icon allows Path Traversal.This issue affects Category Icon: from n/a through = 1.0.1...

4.9CVSS7.2AI score0.00558EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/03 9:47 p.m.•14 views

CVE-2025-31819

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pixelgrade Nova Blocks nova-blocks.This issue affects Nova Blocks: from n/a through = 2.1.8...

6.5CVSS7.2AI score0.00298EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/03 2:15 p.m.•23 views

CVE-2025-31825

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in pixelgrade Category Icon category-icon allows Path Traversal.This issue affects Category Icon: from n/a through = 1.0.1...

4.9CVSS0.00558EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/03 1:27 p.m.•86 views

CVE-2025-31825

CVE-2025-31825 : Path Traversal in the Category Icon WordPress plugin allows authenticated authors to access restricted directories and download arbitrary files. Affected: Category Icon

4.9CVSS8.4AI score0.00558EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/03 12:00 a.m.•19 views

PT-2025-14739 · Pixelgrade · Category Icon

Name of the Vulnerable Software and Affected Versions: Category Icon versions through 1.0.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in the pixelgrade Category Icon...

4.9CVSS6AI score0.00558EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•8 views

CVE-2025-31825: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in pixelgrade Category Icon category-icon allows Path Traversal.This issue affects Category Icon: from n/a through = 1.0.1...

4.9CVSS8.5AI score0.00558EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/01 9:15 p.m.•28 views

CVE-2025-31819

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pixelgrade Nova Blocks nova-blocks.This issue affects Nova Blocks: from n/a through = 2.1.8...

6.5CVSS0.00298EPSS
SaveExploits0References1
Rows per page
Query Builder