Vulnerabilities

TI-2024-07294 CVE-2024-7870 · GHSA-4j3v-43xc-7cjr

Improper authentication in PixelYourSite – Your smart PIXEL & API Manager

LOW 39

The PixelYourSite – Your smart PIXEL (TAG) & API Manager and the PixelYourSite PRO plugins for WordPress are vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.7.1 and 10.4.2, respective…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0045 Published 2024-09-04 No fix listed CWE-287

TI-2024-24951 CVE-2024-37447 · GHSA-v732-x3hh-884c

WordPress PixelYourSite plugin <= 9.6.1.1 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager allows Stored XSS.This issue affects PixelYourSite…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0026 Published 2024-07-21 No fix listed CWE-79

TI-2023-02414 CVE-2023-2584 · GHSA-xg2q-52m6-9g8j

PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

LOW 23

The PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 9.3.6 (9.6.1 in the Pro version) due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00516 Published 2023-06-09 No fix listed CWE-79

TI-2023-08875 CVE-2023-22700 · GHSA-77hr-wvv3-vjx6

Cross-site request forgery in PixelYourSite – Your smart PIXEL Manager

LOW 20

Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 9.3.0 versions.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00231 Published 2023-03-13 No fix listed CWE-352

TI-2018-00535 CVE-2018-0578 · GHSA-6hgj-jqcg-fp85

Cross-site scripting in Minimal Work SRL PixelYourSite