pixelyoursite
Web & CMS Pluginscommercial
Latest CVEs
The 15 most recently published vulnerabilities affecting pixelyoursite.
- CVE-2026-18059PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation5.3
- CVE-2026-7613Cost of Goods by PixelYourSite <= 1.2.12 - Unauthenticated Stored Cross-Site Scripting via Cost of Goods Import7.2
- CVE-2026-7637Boost <= 2.0.3 - Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION Cookie9.8
- CVE-2026-9010Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters7.5
- CVE-2026-7049PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter7.2
- CVE-2026-27072WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.2.0.1 - Cross Site Scripting (XSS) vulnerability7.1
- CVE-2026-1841PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting7.2
- CVE-2026-1844PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored Cross-Site Scripting7.2
- CVE-2025-14280PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File5.3
- CVE-2025-10588PixelYourSite <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification4.3
- CVE-2025-22300WordPress PixelYourSite plugin <= 10.0.1.2 - Cross Site Request Forgery (CSRF) vulnerability5.4
- CVE-2024-7870PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion6.5
- CVE-2024-37447WordPress PixelYourSite plugin <= 9.6.1.1 - Cross Site Scripting (XSS) vulnerability5.9
- CVE-2023-49824WordPress Product Catalog Feed by PixelYourSite Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)5.4
- CVE-2023-2584PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting4.4