pixel_prime

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

pixel_prime records in CISA KEV

No pixel_prime vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-03177 CVE-2025-3610 · GHSA-52cj-q87r-f28w

Reales WP STPT <= 2.1.2 - Authenticated (Subscriber+) Privilege Escalation via Password Update

MEDIUM 41

The Reales WP STPT plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.1.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00648 Published 2025-05-06 No fix listed CWE-639

TI-2025-07044 CVE-2025-7718 · GHSA-vqxv-vc5v-pm35

Authorization bypass in pixel_prime Resideo Plugin for Resideo - Real Estate WordPress…

MEDIUM 40

The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.5.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00329 Published 2025-09-10 No fix listed CWE-639

TI-2025-03176 CVE-2025-3609 · GHSA-5ww6-4ggh-rhrp

Reales WP STPT <= 2.1.2 - Unauthorized User Registration

LOW 30

The Reales WP STPT plugin for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 2.1.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00291 Published 2025-05-06 No fix listed CWE-863

TI-2024-12351 CVE-2024-13307 · GHSA-4xxh-h8pj-qxc6

Missing authorization in pixel_prime Reales WP - Real Estate WordPress Theme

LOW 30

The Reales WP - Real Estate WordPress Theme theme for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'reales_delete_file', 'reales_delete_file_plans', 'real…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00291 Published 2025-04-24 No fix listed CWE-862

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0