Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-8047

Multiple Plugins from itayamar - Supply Chain Compromise

Description

The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert marketing security services. Users that pay are added to allowedDomains to suppress the popup.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown disable-right-click-powered-by-pixterme

Default version status: affected

  • 0 to ≤ 1.2affected

Unknown pixter-image-digital-license

Default version status: affected

  • 0 to ≤ 1.0affected

References