Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

PixelYourSite — Vulnerabilities & Security Advisories 19

Browse all 19 CVE security advisories affecting PixelYourSite. AI-powered Chinese analysis, POCs, and references for each vulnerability.

PixelYourSite is a WordPress plugin designed for conversion tracking and marketing automation. Historically, it has been susceptible to multiple security vulnerabilities, including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation issues. The plugin's 13 recorded CVEs highlight recurring problems related to insufficient input validation and improper access controls. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities suggests potential risks for unpatched installations. Users are advised to maintain current versions to mitigate these known security weaknesses.

CVE ID Title CVSS Severity Published
CVE-2026-95530 WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.4.1 - Cross Site Scripting (XSS) vulnerability — PixelYourSite – Your smart PIXEL (TAG) Manager CWE-79 6.5 Medium 2026-09-23
CVE-2026-9331 EDD Product Catalog Feed by PixelYourSite <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Deletion via Missing Authorization on 'delete' Parameter — EDD Product Catalog Feed by PixelYourSite CWE-862 7.1 High 2026-09-08
CVE-2026-18059 PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation — PixelYourSite – Your smart PIXEL (TAG) & API Manager CWE-200 5.3 Medium 2026-08-01
CVE-2026-7613 Cost of Goods by PixelYourSite <= 1.2.12 - Unauthenticated Stored Cross-Site Scripting via Cost of Goods Import — Cost of Goods by PixelYourSite CWE-79 7.2 High 2026-05-20
CVE-2026-7637 Boost <= 2.0.3 - Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION Cookie — Boost CWE-502 9.8 Critical 2026-05-20
CVE-2026-9010 Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters — Boost CWE-89 7.5 High 2026-05-20
CVE-2026-7049 PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter — PixelYourSite Pro – Your smart PIXEL (TAG) Manager CWE-918 7.2 High 2026-05-02
CVE-2026-27072 WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.2.0.1 - Cross Site Scripting (XSS) vulnerability — PixelYourSite – Your smart PIXEL (TAG) Manager CWE-79 7.1 High 2026-02-20
CVE-2026-1841 PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting — PixelYourSite – Your smart PIXEL (TAG) & API Manager CWE-79 7.2 High 2026-02-13
CVE-2026-1844 PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored Cross-Site Scripting — PixelYourSite Pro – Your smart PIXEL (TAG) Manager CWE-79 7.2 High 2026-02-13
CVE-2025-14280 PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File — PixelYourSite – Your smart PIXEL (TAG) & API Manager CWE-200 5.3 Medium 2025-12-29
CVE-2025-10588 PixelYourSite <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification — PixelYourSite – Your smart PIXEL (TAG) & API Manager CWE-352 4.3 Medium 2025-10-22
CVE-2025-0769 PixelYourSite 10.1.1.1 - Insecure deserialization CWE-502 8.8 - 2025-02-28
CVE-2025-22300 WordPress PixelYourSite plugin <= 10.0.1.2 - Cross Site Request Forgery (CSRF) vulnerability — PixelYourSite – Your smart PIXEL (TAG) Manager CWE-352 5.4 Medium 2025-01-07
CVE-2024-7870 PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion — PixelYourSite – Your smart PIXEL (TAG) & API Manager CWE-287 6.5 Medium 2024-09-04
CVE-2024-37447 WordPress PixelYourSite plugin <= 9.6.1.1 - Cross Site Scripting (XSS) vulnerability — PixelYourSite – Your smart PIXEL (TAG) Manager CWE-79 5.9 Medium 2024-07-21
CVE-2023-49824 WordPress Product Catalog Feed by PixelYourSite Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF) — Product Catalog Feed by PixelYourSite CWE-352 5.4 Medium 2023-12-17
CVE-2023-2584 PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting — PixelYourSite – Your smart PIXEL (TAG) & API Manager CWE-79 4.4 Medium 2023-06-09
CVE-2023-22700 WordPress PixelYourSite – Your smart PIXEL (TAG) Manager Plugin <= 9.3.0 is vulnerable to Cross Site Request Forgery (CSRF) — PixelYourSite – Your smart PIXEL (TAG) Manager CWE-352 4.3 Medium 2023-03-13

This page lists every published CVE security advisory associated with PixelYourSite. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.