CVE-2024-7870: PixelYourSite Unauthenticated Info Disclosure and Log Deletion

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Name: - PixelYourSite - Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion 2. Vulnerability Description: - The PixelYourSite - Your smart PIXEL (TAG) & API Manager and PixelYourSite PRO plugins are affected by an unauthenticated information disclosure and log deletion vulnerability, impacting all versions, including 9.7.1 and 10.4.2. 3. CVSS Score: - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - CVSS Score: 6.5 (Medium) 4. Vulnerability ID: - CVE-2024-7870 5. Public Release Date: - September 3, 2024 6. Update Date: - September 4, 2024 7. Researcher: - Xetnus 8. Affected Software Packages: - PixelYourSite - Your smart PIXEL (TAG) & API Manager - PixelYourSite Pro - Your smart PIXEL (TAG) Manager 9. Fix Status: - PixelYourSite - Your smart PIXEL (TAG) & API Manager has been patched. Users are advised to update to version 9.7.2 or higher. - PixelYourSite Pro has been patched. Users are advised to update to version 10.4.3 or higher. 10. Reference Links: - github.com - plugins.trac.wordpress.org 11. Sharing Options: - Facebook - Twitter - LinkedIn - Email 12. Copyright and Licensing Information: - Copyright and licensing information provided by Defiant Inc. and MITRE Corporation. 13. Vulnerability Database: - Wordfence Intelligence offers a free WordPress vulnerability database accessible via API. 14. Additional Information: - Information about Wordfence products and services, including Wordfence Free, Wordfence Premium, Wordfence Care, Wordfence Response, Wordfence CLI, Wordfence Intelligence, and Wordfence Central. This information helps users understand the vulnerability details and how to remediate and avoid potential security risks.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2024-7870: PixelYourSite Unauthenticated Info Disclosure and Log Deletion

More from this source