TI-2025-03933 CVE-2025-4413 · GHSA-858h-7rc9-8hvc
Pixabay Images <= 3.4 - Authenticated (Author+) Arbitrary File Upload
Priority MEDIUM 41
The Pixabay Images plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the pixabay_upload function in all versions up to, and including, 3.4.