Skip to content

Pixelyoursite vulnerabilities

Products

Newest

pixelyoursite product catalog feed by pixelyoursite WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability CVE-2026-118078 7.2 HighOctober 29, 2026
pixelyoursite – your smart pixel (tag) manager WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.4.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-95530 6.5 MediumSeptember 23, 2026
pixelyoursite edd product catalog feed by pixelyoursite EDD Product Catalog Feed by PixelYourSite <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Deletion via Missing Authorization on 'delete' Parameter CVE-2026-9331 7.1 HighSeptember 8, 2026
pixelyoursite – your smart pixel (tag) & api manager, pro – your smart pixel (tag) manager +1 more PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation CVE-2026-18059 5.3 MediumAugust 1, 2026
pixelyoursite cost of goods by pixelyoursite Cost of Goods by PixelYourSite <= 1.2.12 - Unauthenticated Stored Cross-Site Scripting via Cost of Goods Import CVE-2026-7613 7.2 HighMay 20, 2026
microsoft boost Boost <= 2.0.3 - Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION Cookie CVE-2026-7637 9.8 CriticalMay 20, 2026
microsoft boost Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters CVE-2026-9010 7.5 HighMay 20, 2026
pixelyoursite pro – your smart pixel (tag) manager PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter CVE-2026-7049 7.2 HighMay 2, 2026
pixelyoursite – your smart pixel (tag) manager WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.2.0.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-27072 7.1 HighFebruary 20, 2026
pixelyoursite – your smart pixel (tag) & api manager PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting CVE-2026-1841 7.2 HighFebruary 13, 2026
pixelyoursite pro – your smart pixel (tag) manager PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored Cross-Site Scripting CVE-2026-1844 Public exploit 7.2 HighFebruary 13, 2026
pixelyoursite – your smart pixel (tag) & api manager PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File CVE-2025-14280 5.3 MediumDecember 29, 2025
pixelyoursite – your smart pixel (tag) & api manager PixelYourSite <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification CVE-2025-10588 4.3 MediumOctober 22, 2025
pixelyoursite – your smart pixel (tag) manager WordPress PixelYourSite plugin <= 10.0.1.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-22300 5.4 MediumJanuary 7, 2025
pixelyoursite, pixelyoursite – your smart pixel (tag) & api manager, pro +1 more +3 more PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion CVE-2024-7870 6.5 MediumSeptember 4, 2024
pixelyoursite, pixelyoursite – your smart pixel (tag) manager +1 more WordPress PixelYourSite plugin <= 9.6.1.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-37447 5.9 MediumJuly 21, 2024
pixelyoursite product catalog feed by pixelyoursite, product catalog feed +1 more WordPress Product Catalog Feed by PixelYourSite Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-49824 5.4 MediumDecember 17, 2023
pixelyoursite, pixelyoursite pro, pro – your smart pixel (tag) manager +1 more +3 more PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-2584 4.4 MediumJune 9, 2023
pixelyoursite product catalog feed by pixelyoursite, product catalog feed +1 more Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS CVE-2023-1804 6.1 MediumMay 2, 2023
pixelyoursite product catalog feed by pixelyoursite, product catalog feed +1 more Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS CVE-2023-1805 6.1 MediumMay 2, 2023
pixelyoursite, pixelyoursite – your smart pixel (tag) manager +1 more WordPress PixelYourSite – Your smart PIXEL (TAG) Manager Plugin <= 9.3.0 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-22700 4.3 MediumMarch 13, 2023
minimal work srl pixelyoursite Cross-site scripting vulnerability in PixelYourSite plugin prior to version 5.3.0 for WordPress... CVE-2018-0578 5.4 MediumMay 14, 2018