Log in Start free

PixelYourSite

Products

ProductCVEsExploitedLatest
PixelYourSite – Your smart PIXEL (TAG) & API Manager6–Aug 1, 2026
PixelYourSite Pro – Your smart PIXEL (TAG) Manager5–Aug 1, 2026
PixelYourSite – Your smart PIXEL (TAG) Manager5–Sep 23, 2026
Product Catalog Feed by PixelYourSite2–Oct 29, 2026
Boost2–May 20, 2026
EDD Product Catalog Feed by PixelYourSite1–Sep 8, 2026
Cost of Goods by PixelYourSite1–May 20, 2026
pixelyoursite1–Feb 28, 2025

Exploited and recent CVEs

  • CVE-2026-118078 High 7.2 WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-95530 Medium 6.5 WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.4.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-9331 High 7.1 EDD Product Catalog Feed by PixelYourSite <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Deletion via Missing Authorization on 'delete' Parameter 0.4%
  • CVE-2026-18059 Medium 5.3 PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation 0.6%
  • CVE-2026-18059 Medium 5.3 PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation 0.6%
  • CVE-2026-7613 High 7.2 Cost of Goods by PixelYourSite <= 1.2.12 - Unauthenticated Stored Cross-Site Scripting via Cost of Goods Import 0.3%
  • CVE-2026-7637 Critical 9.8 Boost <= 2.0.3 - Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION Cookie 0.6%
  • CVE-2026-9010 High 7.5 Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters 0.4%
  • CVE-2026-7049 High 7.2 PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter 0.6%
  • CVE-2026-27072 High 7.1 WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.2.0.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-1841 High 7.2 PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting 0.3%
  • CVE-2026-1844 High 7.2 PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored Cross-Site Scripting 0.3%
  • CVE-2025-14280 Medium 5.3 PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File 0.4%
  • CVE-2025-10588 Medium 4.3 PixelYourSite <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification 0.2%
  • CVE-2025-0769 Medium 6.3 PixelYourSite 10.1.1.1 - Insecure deserialization 0.4%
  • CVE-2025-22300 Medium 5.4 WordPress PixelYourSite plugin <= 10.0.1.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-7870 Medium 6.5 PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion 0.4%
  • CVE-2024-7870 Medium 6.5 PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion 0.4%
  • CVE-2024-37447 Medium 5.9 WordPress PixelYourSite plugin <= 9.6.1.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-49824 Medium 5.4 WordPress Product Catalog Feed by PixelYourSite Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
  • CVE-2023-2584 Medium 4.4 PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.5%
  • CVE-2023-2584 Medium 4.4 PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.5%
  • CVE-2023-22700 Medium 4.3 WordPress PixelYourSite – Your smart PIXEL (TAG) Manager Plugin <= 9.3.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%