andrasweb

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

andrasweb records in CISA KEV

No andrasweb vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-09812 CVE-2026-11367 · GHSA-pmh9-5c73-wc86

PixMagix <= 1.7.2 - Authenticated (Author+) Path Traversal in 'layers[].id' Parameter

LOW 30

The PixMagix – WordPress Image Editor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.7.2 via the move_image_on_server function.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00794 Published 2026-06-30 No fix listed CWE-22

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0