PixelYourSite

8 results · Clear filters · Feed

• High 7.2
  CVE-2026-118078

  WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability

  Shop manager PHP Object Injection in Product Catalog Feed by PixelYourSite <= 3.1.4 versions.

  PixelYourSite Product Catalog Feed by PixelYourSite
  Oct 29, 2026
• High 7.1
  CVE-2026-9331

  EDD Product Catalog Feed by PixelYourSite <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Deletion via Missing Authorization on 'delete' Parameter

  The EDD Product Catalog Feed by PixelYourSite plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the wpeddpcf_delete_feed function in all versions up to, and includ…

  PixelYourSite EDD Product Catalog Feed by PixelYourSite Web / CMS
  Sep 8, 2026
• High 7.2
  CVE-2026-7613

  Cost of Goods by PixelYourSite <= 1.2.12 - Unauthenticated Stored Cross-Site Scripting via Cost of Goods Import

  The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csvdata[0][cost_of_goods_value]' parameter in versions up to, and including, 1.2.12 due to insufficient input sanitization and output escaping. This …

  PixelYourSite Cost of Goods by PixelYourSite Web / CMS
  May 20, 2026
• High 7.5
  CVE-2026-9010

  Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters

  The Boost plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_url' and 'user_name' parameters in versions up to, and including, 2.0.3 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation o…

  PixelYourSite Boost boost Web / CMS Azure Linux
  May 20, 2026
• High 7.2
  CVE-2026-7049

  PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter

  The PixelYourSite Pro – Your smart PIXEL (TAG) Manager plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 12.5.0.1 via the scan_video. This makes it possible for unauthenticated attackers to make web reques…

  PixelYourSite PixelYourSite Pro – Your smart PIXEL (TAG) Manager Web / CMS
  May 2, 2026
• High 7.1
  CVE-2026-27072

  WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.2.0.1 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager pixelyoursite allows Stored XSS.This issue affects PixelYourSite – Your smart PIXEL (TAG) Manage…

  PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager
  Feb 20, 2026
• High 7.2
  CVE-2026-1841

  PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting

  The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landing_page' parameter in all versions up to, and including, 11.2.0 due to insufficie…

  PixelYourSite PixelYourSite – Your smart PIXEL (TAG) & API Manager Web / CMS
  Feb 13, 2026
• High 7.2
  CVE-2026-1844 Public exploit

  PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored Cross-Site Scripting

  The PixelYourSite PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landing_page' parameter in all versions up to, and including, 12.4.0.2 due to insufficient input sanitization and output …

  PixelYourSite PixelYourSite Pro – Your smart PIXEL (TAG) Manager Web / CMS
  Feb 13, 2026