CVE-2025-10723

PixelYourSite < 11.1.2 - Admin+ LFI PUBLISHED

Description (CNA)

The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate paths passed to function/s, allowing any admins to perform LFI attacks

Affected (CNA)

Vendor / product	Versions
Unknown / PixelYourSite	affected 0 before 11.1.2

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/88a99f9d-dc7f-4c04-8734-77295c8656bf/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.