PT-2025-43581 · WordPress · Pixelyoursite Wordpress Plugin

Dmitry Ignatyev · Published 2025-10-24 · Updated 2025-10-24 · CVE-2025-10723

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions PixelYourSite WordPress plugin versions prior to 11.1.2

Description The PixelYourSite WordPress plugin does not properly validate certain URL parameters before utilizing them to construct file paths that are then passed to functions. This insufficient validation allows administrators to potentially carry out Local File Inclusion (LFI) attacks.

Recommendations Update the PixelYourSite WordPress plugin to version 11.1.2 or later.

Exploit

Fix

Related Identifiers

CVE-2025-10723

Affected Products

Pixelyoursite Wordpress Plugin

References · 5

• 🔥 https://wpscan.com/vulnerability/88a99f9d-dc7f-4c04-8734-77295c8656bf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10723 · Security Note
• https://twitter.com/CVEnew/status/1981607293784392167 · Twitter Post
• https://t.me/CVEtracker/35637 · Telegram Post
• https://t.me/cveNotify/140126 · Telegram Post