CVE-2025-8047

The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert marketing security services. Users that pay are added to allowedDomains to suppress the popup.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://wpscan.com/vulnerability/a0c70b98-a3f9-4d4c-a25f-81424230b1a5/
https://wpscan.com/vulnerability/a0c70b98-a3f9-4d4c-a25f-81424230b1a5/

Configurations

No configuration.

History

No history.

Information

Published : 2025-08-14 10:15

Updated : 2026-06-17 10:06

NVD link : CVE-2025-8047

Mitre link : CVE-2025-8047

CVE.ORG link : CVE-2025-8047

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2025-8047", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-8047", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-08-14T14:31:08.728544Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "contact@wpscan.com", "affectedData": [{"vendor": "Unknown", "product": "disable-right-click-powered-by-pixterme", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.2"}], "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "affected"}, {"vendor": "Unknown", "product": "pixter-image-digital-license", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.0"}], "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "affected"}]}], "published": "2025-08-14T10:15:29.510", "references": [{"url": "https://wpscan.com/vulnerability/a0c70b98-a3f9-4d4c-a25f-81424230b1a5/", "source": "contact@wpscan.com"}, {"url": "https://wpscan.com/vulnerability/a0c70b98-a3f9-4d4c-a25f-81424230b1a5/", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert marketing security services. Users that pay are added to allowedDomains to suppress the popup."}, {"lang": "es", "value": "Los complementos disable-right-click-powered-by-pixterme hasta v1.2 y pixter-image-digital-license hasta v1.0 de WordPress cargan un archivo JavaScript comprometido desde un bucket S3 aparentemente abandonado. Quienes lo controlan pueden usarlo como puerta trasera, pero actualmente muestra una alerta que anuncia servicios de seguridad. Los usuarios que pagan se a\u00f1aden a \"permitido\" para suprimir la ventana emergente."}], "lastModified": "2026-06-17T10:06:12.710", "sourceIdentifier": "contact@wpscan.com"}