Low severity2.7NVD Advisory· Published Oct 24, 2025· Updated Apr 15, 2026

CVE-2025-10723

Description

The PixelYourSite WordPress plugin before 11.1.2 does not validate some URL parameters before using them to generate paths passed to function/s, allowing any admins to perform LFI attacks

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Pixelyoursiteinferred
Range: <11.1.2
Package: https://wordpress.org/plugins/pixelyoursite
Pixelyoursite/Pixelyoursitellm-fuzzy
Range: <11.1.2

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/88a99f9d-dc7f-4c04-8734-77295c8656bf/nvd

News mentions

No linked articles in our index yet.

cvss	0.176
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000