Pixelimity

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Pixelimity records in CISA KEV

No Pixelimity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pixelimity 7 records MEDIUM

Records

7 records in Pixelimity · all components

TI-2025-04672 CVE-2025-5206 · GHSA-r7vp-rjp7-f82g

Pixelimity Installation index.php sql injection

MEDIUM 56

A vulnerability classified as critical was found in Pixelimity 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00449 Published 2025-05-26 No fix listed CWE-74

TI-2022-11249 CVE-2022-28590 · GHSA-vg85-f4q8-835g

A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.

MEDIUM 52

A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.23758 Published 2022-05-03 No fix listed

TI-2020-14574 CVE-2020-23522 · GHSA-8q82-2c4p-w6hp

Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter.

LOW 34

Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.02033 Published 2021-01-19 No fix listed CWE-352

TI-2022-11248 CVE-2022-28589 · GHSA-mh7x-f476-94jq

A stored cross-site scripting (XSS) vulnerability in Pixelimity 1.0 allows attackers to…

LOW 23

A stored cross-site scripting (XSS) vulnerability in Pixelimity 1.0 allows attackers to execute arbitrary web scripts or HTML via the Title field in admin/pages.php?action=add_new

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0057 Published 2022-05-03 No fix listed CWE-79

TI-2021-19020 CVE-2021-42866 · GHSA-29xq-r9ph-fp32

A Cross Site Scripting vulnerabilty exists in Pixelimity 1.0 via the Site Description…

LOW 23

A Cross Site Scripting vulnerabilty exists in Pixelimity 1.0 via the Site Description field in pixelimity/admin/setting.php

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00558 Published 2022-03-31 No fix listed CWE-79

TI-2021-09946 CVE-2021-29056 · GHSA-6357-93rg-cf69

Cross Site Scripting (XSS) vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php.

LOW 23

Cross Site Scripting (XSS) vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0051 Published 2021-08-17 No fix listed CWE-79

TI-2018-14113 CVE-2018-19919 · GHSA-m8fx-j5x8-385m

Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as…

LOW 23

Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onload attribute of an SVG element.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.0067 Published 2018-12-06 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	6
Low	0
No CVSS	0