Pixelgrade vulnerabilities

Products

• Category Icon 4
• Comments Rating 3
• Comments Ratings 3
• Nova Blocks 2
• Pixfields 2
• Pixtypes 2

Newest

• pixelgrade backstage – customizer demo access Backstage <= 1.4.2 - Unauthenticated Privilege Escalation via Permissive Demo Role Capabilities CVE-2026-9842 7.5 HighJuly 8, 2026
• pixelgrade nova blocks WordPress Nova Blocks plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-24528 6.5 MediumJanuary 23, 2026
• pixelgrade category icon WordPress Category Icon plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability CVE-2025-68525 5.9 MediumDecember 24, 2025
• pixelgrade category icon WordPress Category Icon plugin <= 1.0.3 - XML External Entity (XXE) vulnerability CVE-2025-31039 9.1 CriticalJune 9, 2025
• pixelgrade style manager WordPress Style Manager plugin <= 2.2.7 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2025-39425 4.3 MediumApril 17, 2025
• pixelgrade category icon WordPress Category Icon plugin <= 1.0.1 - Arbitrary File Download vulnerability CVE-2025-31825 4.9 MediumApril 3, 2025
• pixelgrade nova blocks WordPress Nova Blocks by Pixelgrade plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability CVE-2025-31819 6.5 MediumApril 1, 2025
• pixelgrade open hours – easy opening hours, open hours +1 more Open Hours – Easy Opening Hours <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12813 6.4 MediumFebruary 18, 2025
• pixelgrade pixproof WordPress PixProof plugin <= 2.0.1 - Broken Access Control vulnerability CVE-2024-54417 5.3 MediumDecember 16, 2024
• pixelgrade category icon Category Icon <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-8915 6.4 MediumOctober 12, 2024
• pixelgrade nova blocks by pixelgrade, nova blocks +1 more Nova Blocks by Pixelgrade <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute CVE-2024-8241 6.4 MediumSeptember 10, 2024
• pixelgrade customify, customify – intuitive website styling +1 more WordPress Customify Plugin <= 2.10.4 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-27633 4.3 MediumNovember 22, 2023
• pixelgrade comments ratings, comments rating +1 more WordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23702 5.9 MediumNovember 6, 2023
• pixelgrade pixfields WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-45655 4.3 MediumOctober 16, 2023
• pixelgrade comments ratings, comments rating +1 more WordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-45654 4.3 MediumOctober 16, 2023
• pixelgrade pixtypes WordPress PixTypes Plugin <= 1.4.15 is vulnerable to Cross Site Scripting (XSS) CVE-2023-40205 7.1 HighSeptember 4, 2023
• pixelgrade comments ratings, comments rating +1 more WordPress Comments Ratings Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-23704 4.3 MediumJuly 11, 2023
• pixelgrade pixtypes WordPress PixTypes Plugin <= 1.4.14 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-25487 4.3 MediumJuly 11, 2023
• pixelgrade pixfields WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Scripting (XSS) CVE-2022-46844 6.5 MediumMay 9, 2023
• pixelgrade pixcodes PixCodes < 2.3.7 - Contributor+ Stored XSS in Shortcode CVE-2022-4671 5.4 MediumJanuary 30, 2023