← Database

CVE-2025-10723

LOW CVSS: 2.7 Published: 2025-10-24 Modified: 2026-06-17

Description

The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate paths passed to function/s, allowing any admins to perform LFI attacks

Affected Platforms

Unknown

Weakness Type

CWE-22

References