Medium · 6.5 CVE-2026-94674 EUVD-2026-89848GHSA-677p-fqqw-rp94

WordPress Pixel Manager for WooCommerce plugin <= 1.69.0 - Cross Site Scripting (XSS) vulnerability

Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack

Vendor: SweetCode Product: Pixel Manager for WooCommerce Category: Web / CMS

Description

Contributor Cross Site Scripting (XSS) in Pixel Manager for WooCommerce <= 1.69.0 versions.

Affected products

Vendor	Product	Affected	Fixed
SweetCode	Pixel Manager for WooCommerce	≤ 1.69.0	—

References

https://patchstack.com/database/wordpress/plugin/woocommerce-google-adwords-conversion-tracking-tag/vulnerability/wordpress-pixel-manager-for-woocommerce-plugin-1-69-0-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry