Advisories · Technology

pixelgrade Category Icon.

Every CVE that names pixelgrade Category Icon among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-68525 CVE record

CVSS 5.9 Medium

WordPress Category Icon plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability
- pixelgrade Category Icon
- Cross-site scripting (XSS)
Not analysed yet 24 Dec 2025
CVE-2025-31039 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

WordPress Category Icon plugin <= 1.0.3 - XML External Entity (XXE) vulnerability
- pixelgrade Category Icon
- XML external entities (XXE)
Not analysed yet 9 Jun 2025
CVE-2025-31825 CVE record

CVSS 4.9 Medium

WordPress Category Icon plugin <= 1.0.1 - Arbitrary File Download vulnerability
- pixelgrade Category Icon
- Path traversal
Not analysed yet 3 Apr 2025
CVE-2024-8915 CVE record

CVSS 6.4 Medium

Category Icon <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- pixelgrade Category Icon
- Cross-site scripting (XSS)
Not analysed yet 12 Oct 2024