pixelgrade vulnerabilities

CVEs per yearBy the year they were published

1. 20238
2. 20243
3. 20256
4. 20262

Newest CVEs

• CVE-2026-9842

  Backstage <= 1.4.2 - Unauthenticated Privilege Escalation via Permissive Demo Role Capabilities

  pixelgrade · Backstage – Customizer Demo Access

  High7.5
• CVE-2026-24528

  WordPress Nova Blocks plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability

  pixelgrade · Nova Blocks

  Medium6.5
• CVE-2025-68525

  WordPress Category Icon plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

  pixelgrade · Category Icon

  Medium5.9
• CVE-2025-31039

  WordPress Category Icon plugin <= 1.0.3 - XML External Entity (XXE) vulnerability

  pixelgrade · Category Icon

  Critical9.1
• CVE-2025-39425

  WordPress Style Manager plugin <= 2.2.7 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

  pixelgrade · Style Manager

  Medium4.3
• CVE-2025-31825

  WordPress Category Icon plugin <= 1.0.1 - Arbitrary File Download vulnerability

  pixelgrade · Category Icon

  Medium4.9
• CVE-2025-31819

  WordPress Nova Blocks by Pixelgrade plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

  pixelgrade · Nova Blocks

  Medium6.5
• CVE-2024-12813

  Open Hours – Easy Opening Hours <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

  pixelgrade · Open Hours – Easy Opening Hours

  Medium6.4
• CVE-2024-54417

  WordPress PixProof plugin <= 2.0.1 - Broken Access Control vulnerability

  pixelgrade · PixProof

  Medium5.3
• CVE-2024-8915

  Category Icon <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  pixelgrade · Category Icon

  Medium6.4