CVE-2025-8047

CRITICAL

9.8

Descripcion

The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert marketing security services. Users that pay are added to allowedDomains to suppress the popup.

Detalles CVE

Puntuacion CVSS v3.19.8

SeveridadCRITICAL

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado8/14/2025

Ultima modificacion8/14/2025

Fuentenvd

Avistamientos honeypot0

Referencias

https://wpscan.com/vulnerability/a0c70b98-a3f9-4d4c-a25f-81424230b1a5/(contact@wpscan.com)

https://wpscan.com/vulnerability/a0c70b98-a3f9-4d4c-a25f-81424230b1a5/(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.