← CVE Intelligence

CVE-2025-8047

Multiple Plugins from itayamar - Supply Chain Compromise PUBLISHED

Description (CNA)

The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert marketing security services. Users that pay are added to allowedDomains to suppress the popup.

Affected (CNA)

Vendor / productVersions
Unknown / disable-right-click-powered-by-pixtermeaffected 0 through 1.2
Unknown / pixter-image-digital-licenseaffected 0 through 1.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.