Log in Start free

PixelGrade

Products

ProductCVEsExploitedLatest
Category Icon4–Dec 24, 2025
Comments Ratings3–Nov 6, 2023
PixFields2–Oct 16, 2023
Nova Blocks2–Jan 23, 2026
PixTypes2–Sep 4, 2023
Backstage – Customizer Demo Access1–Jul 8, 2026
Style Manager1–Apr 17, 2025
Customify – Intuitive Website Styling1–Nov 22, 2023
Nova Blocks by Pixelgrade1–Sep 10, 2024
Open Hours – Easy Opening Hours1–Feb 18, 2025
PixProof1–Dec 16, 2024

Exploited and recent CVEs

  • CVE-2026-9842 High 7.5 Backstage <= 1.4.2 - Unauthenticated Privilege Escalation via Permissive Demo Role Capabilities 0.4%
  • CVE-2026-24528 Medium 6.5 WordPress Nova Blocks plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-68525 Medium 5.9 WordPress Category Icon plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-31039 Critical 9.1 WordPress Category Icon plugin <= 1.0.3 - XML External Entity (XXE) vulnerability 0.6%
  • CVE-2025-39425 Medium 4.3 WordPress Style Manager plugin <= 2.2.7 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
  • CVE-2025-31825 Medium 4.9 WordPress Category Icon plugin <= 1.0.1 - Arbitrary File Download vulnerability 0.6%
  • CVE-2025-31819 Medium 6.5 WordPress Nova Blocks by Pixelgrade plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-12813 Medium 6.4 Open Hours – Easy Opening Hours <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-54417 Medium 5.3 WordPress PixProof plugin <= 2.0.1 - Broken Access Control vulnerability 0.5%
  • CVE-2024-8915 Medium 6.4 Category Icon <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2024-8241 Medium 6.4 Nova Blocks by Pixelgrade <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via align Attribute 0.4%
  • CVE-2023-27633 Medium 4.3 WordPress Customify Plugin <= 2.10.4 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-23702 Medium 5.9 WordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-45655 Medium 4.3 WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-45654 Medium 4.3 WordPress Comments Ratings Plugin <= 1.1.7 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-40205 High 7.1 WordPress PixTypes Plugin <= 1.4.15 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-23704 Medium 4.3 WordPress Comments Ratings Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-25487 Medium 4.3 WordPress PixTypes Plugin <= 1.4.14 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2022-46844 Medium 6.5 WordPress PixFields Plugin <= 0.7.0 is vulnerable to Cross Site Scripting (XSS) 0.4%