CVE-2025-8047

CRITICAL

The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned...

Affects 0 products across 3 vendors.

CVSS 3.19.8
EPSS0.4%
Percentile37th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
◆ AI Analysis — automated analysis, not human-reviewed

The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license through v1.0 WordPress plugins are compromised due to a maliciously loaded JavaScript file from an abandoned S3 bucket. This can serve as a backdoor for attackers, although it currently only displays a marketing alert.

BSID: BS-2025-GLOBAL-036983-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-8047?
The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license through v1.0 WordPress plugins are compromised due to a maliciously loaded JavaScript file from an abandoned S3 bucket. This can serve as a backdoor for attackers, although it currently only displays a marketing alert.
What is the CVSS score for CVE-2025-8047?
CVE-2025-8047 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.4%.
Is CVE-2025-8047 actively exploited?
No confirmed active exploitation of CVE-2025-8047 as of 2026-05-30.
How do I remediate CVE-2025-8047?
Priority: IMMEDIATE.
What systems are affected by CVE-2025-8047?
CVE-2025-8047 affects Digital; Javascript; Wordpress.
Vulnerability Details
CVE IDCVE-2025-8047
BSIDBS-2025-GLOBAL-036983-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2025-08-14
Last Modified2026-04-15
ICS Relevance0%
SourceNVD
Official Description

The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins load a JavaScript file which has been compromised from an apparent abandoned S3 bucket. It can be used as a backdoor by those who control it, but it currently displays an alert marketing security services. Users that pay are added to allowedDomains to suppress the popup.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability arises from the plugins loading a JavaScript file from an S3 bucket that has been compromised. Attackers can control the content of this file, potentially allowing them to execute arbitrary code on the affected sites.

Exploitation Likelihood: HIGH

Affected Products
VendorProductAffected Versions
Digital — —
Javascript — —
Wordpress — —
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 428 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash1ccc21d27f5e08595adad60392fc4c1a0c924c7080f7da280a63607a7756c9f9f1662c35bb4aedc1ecc27fd7708b84e0734be4d9a2525cbf1c27fca995be7743
Related CVEs affecting Digital
CVE-2001-0134 10.0 Buffer overflow in cpqlogin.htm in web-enabled agents for various Compaq mana... CVE-1999-0046 10.0 Buffer overflow of rlogin program using TERM environmental variable. CVE-1999-1032 10.0 Vulnerability in LAT/Telnet Gateway (lattelnet) on Ultrix 4.1 and 4.2 allows ... CVE-1999-0073 10.0 Telnet allows a remote client to specify environment variables including LD_L... CVE-2024-54261 10.0 Improper Neutralization of Special Elements used in an SQL Command ('SQL Inje...
View all Digital CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →