WordPress security by component

PixMagix – WordPress Image Editor

Plugin description

PixMagix – WordPress Image Editor is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 30, 2026; the highest CVE/CNA score is 6.5.

Plugin slug: pixmagix

Latest vulnerability

CVE-2026-11367: PixMagix – WordPress Image Editor: Filesystem traversal

PixMagix – WordPress Image Editor is affected by filesystem traversal. Exploitation requires at least author-level access. A crafted path can escape the intended directory and reach files or directories elsewhere on the server. The published affected range is <= 1.7.2.

PublishedJun 30, 2026

Known safe version> 1.7.2

		Safe version
Jun 30, 2026	CVE-2026-11367 PixMagix – WordPress Image Editor: Filesystem traversal PixMagix – WordPress Image Editor is affected by filesystem traversal. Exploitation requires at least author-level access. A crafted path can escape the intended directory and reach files or directories elsewhere on the server. The published affected range is <= 1.7.2.	> 1.7.2	CVE6.5 NVDPending