CVE Intelligence

Vulnerabilidades do Kamleshyadav PixelPlay

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Kamleshyadav PixelPlay: 1 registro(s), com versões afetadas e correções.

CVE-2025-14486 Média · 5.3 CWE-862 22/09/2026
PixelPlay <= 1.0.2 - Missing Authorization to Unauthenticated Arbitrary API Key Deletion via 'clear_api_type' Parameter
The PixelPlay plugin for WordPress is vulnerable to unauthorized API key deletion due to missing authorization checks in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to delete arbitrary API keys (Pixabay, Unsplash, Pixels, OpenAI) configured by site administrators via the 'clear_api_type' parameter.