PixelGrade vulnerabilities
We track 2 vulnerabilities in PixelGrade products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 8, 2026.
2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score
Latest PixelGrade vulnerabilities
- 7.5 High severity
Backstage – Customizer Demo Access: Improper Privilege Management
The Backstage - Customizer Demo Access plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This is due to the plugin assigning the `manage_options` capability to the `backstage_customizer_user` demo role, whi
- 9.1 Critical severity
Category Icon: Improper Restriction of XML External Entity Reference
Improper Restriction of XML External Entity Reference vulnerability in pixelgrade Category Icon category-icon allows XML Entity Linking.This issue affects Category Icon: from n/a through <= 1.0.3.