Skip to content
OpenAdvisories

Vendor

andrasweb

1 known vulnerabilities.

Products

PixMagix – WordPress Image Editor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-11367

    PixMagix <= 1.7.2 - Authenticated (Author+) Path Traversal in 'layers[].id' Parameter

    The PixMagix – WordPress Image Editor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.7.2 via the move_image_on_server function. This makes it possible for authenticated attackers, with author-level access and…

    andrasweb PixMagix – WordPress Image Editor Web / CMS