Pixmagix – Wordpress Image Editor
Approved changes feed: RSS · Atom
cpe:2.3:a:andrasweb:pixmagix_–_wordpress_image_editor:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Andrasweb (6f397c26-6f7e-5101-adca-80217f50491e) |
|---|---|
| Product | Pixmagix – Wordpress Image Editor (6077a6ad-98ad-58b8-b266-e3c27efd2bf3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-11367 |
vulnerable | 2026-07-29 00:23:30.995927 |
PixMagix <= 1.7.2 - Authenticated (Author+) Path Traversal in 'layers[].id' Parameter
MEDIUM (6.5)
The PixMagix – WordPress Image Editor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.7.2 via the move_image_on_server function. This makes it possible for authenticated attackers, with author-level access and above, to write files with attacker-controlled content to arbitrary locations on the server. The unsanitized 'layers[].id' parameter is concatenated into a filesystem path and passed to PHP's copy() function, allowing traversal sequences (e.g. '../../') to escape the intended upload directory and write attacker-supplied file contents to arbitrary paths accessible by the web server process. The save_template REST endpoint is gated by the create_projects permission (edit_pixmagix + upload_files), which Author-level users hold by default after plugin activation, making this exploitable by any Author on sites running PixMagix.
Published: 2026-06-30T04:30:18.532Z
Updated: 2026-06-30T12:22:56.084Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.