Pixiv Custom

Pixiv Custom has one disclosed vulnerability in the WordSec catalog, all reported in 2011; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Pixiv Custom has a vendor fix available, so running the current release closes it.

All of these findings were reported by SiteWatch. Pixiv Custom is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The upstream project has not shipped an update in about 15 years, so new fixes are unlikely to arrive on their own.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Pixiv Custom vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2011-3858

Pixiv Custom < 2.1.6 - Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2011-09-29 00:00	Pixiv Custom < 2.1.6 - Cross-Site Scripting Pixiv Custom < 2.1.6	`CVE-2011-3858`	6.1 Medium	SiteWatch	Yes

Showing 1–1 of 1 reports

Latestv2.1.5

Pixiv Custom

Author

tommy351

2.0(1)

40/100

Last Updated

2011-07-09 (15y ago)

Active Installs

40+

Downloads

27,264

Requires WP

Requires PHP

Created

2010-10-16 (16y ago)

Pixiv Style. A simple theme which just needs few images and lines, built-in AJAX navigation, AJAX comment, Reply nofication. Compatible with WordPress 3.0 features.