The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert marketing security services. Users that pay are added to allowedDomains to suppress the popup.
CVSS
No CVSS.
References
Configurations
No configuration.
History
14 Aug 2025, 10:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-08-14 10:15
Updated : 2025-08-14 15:15
NVD link : CVE-2025-8047
Mitre link : CVE-2025-8047
JSON object : View
Products Affected
No product.
CWE
No CWE.