TI-2025-01896 CVE-2025-2164 · GHSA-994r-w2xc-hgf2pixelstats <= 0.8.2 - Reflected Cross-Site ScriptingPriority LOW 27The pixelstats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'post_id' and 'sortby' parameters in all versions up to, and including, 0.8.2 due to insufficient input sanitization and output…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00329 · Published 2025-03-15 · No fix listed CWE-79