Skip to content
OpenAdvisories

Vendor

pixelgrade

19 known vulnerabilities.

Products

Category Icon 4 Comments Ratings 3 PixTypes 2 Nova Blocks 2 PixFields 2 Open Hours – Easy Opening Hours 1 Customify – Intuitive Website Styling 1 Style Manager 1 Backstage – Customizer Demo Access 1 Nova Blocks by Pixelgrade 1 PixProof 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-9842

    Backstage <= 1.4.2 - Unauthenticated Privilege Escalation via Permissive Demo Role Capabilities

    The Backstage - Customizer Demo Access plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This is due to the plugin assigning the `manage_options` capability to the `backstage_customizer_user` demo role, wh…

    pixelgrade Backstage – Customizer Demo Access Web / CMS
  • High 7.1
    CVE-2023-40205

    WordPress PixTypes Plugin <= 1.4.15 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Pixelgrade PixTypes plugin <= 1.4.15 versions.

    pixelgrade PixTypes