Skip to content
Sign in
2.7 Low

CVE-2025-10723 The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate…

Description

The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate paths passed to function/s, allowing any admins to perform LFI attacks

Affected products and versions

Product Affected versions Fixed in
PixelYourSite 11.1 earliest → < 11.1.2 11.1.2

Other CVEs of PixelYourSite

The 2 CVEs of PixelYourSite →
CVE-2026-109987 The PixelYourSite WordPress plugin before 11.4.3, PixelYourSite Pro WordPress plugin before 12.6.8 do not sanitise… 7.2 High
Track this CVE