Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

PixelYourSite vulnerabilities

20 published CVEs name PixelYourSite among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-118078

    WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability

    PixelYourSite · Product Catalog Feed by PixelYourSite

    High7.2
  • CVE-2026-95530

    WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.4.1 - Cross Site Scripting (XSS) vulnerability

    PixelYourSite · PixelYourSite – Your smart PIXEL (TAG) Manager

    Medium6.5
  • CVE-2026-9331

    EDD Product Catalog Feed by PixelYourSite <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Deletion via Missing Authorization on 'delete' Parameter

    PixelYourSite · EDD Product Catalog Feed by PixelYourSite

    High7.1
  • CVE-2026-18059

    PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation

    pixelyoursite · PixelYourSite – Your smart PIXEL (TAG) & API Manager

    Medium5.3
  • CVE-2026-7613

    Cost of Goods by PixelYourSite <= 1.2.12 - Unauthenticated Stored Cross-Site Scripting via Cost of Goods Import

    pixelyoursite · Cost of Goods by PixelYourSite

    High7.2
  • CVE-2026-7637

    Boost <= 2.0.3 - Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION Cookie

    PixelYourSite · Boost

    Critical9.8
  • CVE-2026-9010

    Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters

    PixelYourSite · Boost

    High7.5
  • CVE-2026-7049

    PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter

    pixelyoursite · PixelYourSite Pro – Your smart PIXEL (TAG) Manager

    High7.2
  • CVE-2026-27072

    WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.2.0.1 - Cross Site Scripting (XSS) vulnerability

    PixelYourSite · PixelYourSite – Your smart PIXEL (TAG) Manager

    High7.1
  • CVE-2026-1841

    PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting

    pixelyoursite · PixelYourSite – Your smart PIXEL (TAG) & API Manager

    High7.2
All 20 in the list