CVE-2026-13604 | Pixelavo Plugin up to 1.5.3 on WordPress AJAX Action server-side request forgery

August 1, 2026 Yanac

A vulnerability was found in Pixelavo Plugin up to 1.5.3 on WordPress. It has been declared as critical. This impacts an unknown function of the component AJAX Action. Executing a manipulation can lead to server-side request forgery.

The identification of this vulnerability is CVE-2026-13604. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More