Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

PixelYourSite vulnerabilities

20 published CVEs name PixelYourSite among the affected products.

All 20 in the listAtom feed of new CVEs
Published CVEs
20
Last 12 months
12
Critical
1
Known exploited
0

Critical 1High 8Medium 11Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20233
  2. 20242
  3. 20254
  4. 202611

Newest CVEs

  • CVE-2026-118078

    WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability

    PixelYourSite · Product Catalog Feed by PixelYourSite

    High7.2
  • CVE-2026-95530

    WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.4.1 - Cross Site Scripting (XSS) vulnerability

    PixelYourSite · PixelYourSite – Your smart PIXEL (TAG) Manager

    Medium6.5
  • CVE-2026-9331

    EDD Product Catalog Feed by PixelYourSite <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Deletion via Missing Authorization on 'delete' Parameter

    PixelYourSite · EDD Product Catalog Feed by PixelYourSite

    High7.1
  • CVE-2026-18059

    PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation

    pixelyoursite · PixelYourSite – Your smart PIXEL (TAG) & API Manager

    Medium5.3
  • CVE-2026-7613

    Cost of Goods by PixelYourSite <= 1.2.12 - Unauthenticated Stored Cross-Site Scripting via Cost of Goods Import

    pixelyoursite · Cost of Goods by PixelYourSite

    High7.2
  • CVE-2026-7637

    Boost <= 2.0.3 - Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION Cookie

    PixelYourSite · Boost

    Critical9.8
  • CVE-2026-9010

    Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters

    PixelYourSite · Boost

    High7.5
  • CVE-2026-7049

    PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter

    pixelyoursite · PixelYourSite Pro – Your smart PIXEL (TAG) Manager

    High7.2
  • CVE-2026-27072

    WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.2.0.1 - Cross Site Scripting (XSS) vulnerability

    PixelYourSite · PixelYourSite – Your smart PIXEL (TAG) Manager

    High7.1
  • CVE-2026-1841

    PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting

    pixelyoursite · PixelYourSite – Your smart PIXEL (TAG) & API Manager

    High7.2

Products with the most CVEs

  1. PixelYourSite – Your smart PIXEL (TAG) & API Manager6
  2. PixelYourSite Pro – Your smart PIXEL (TAG) Manager5
  3. PixelYourSite – Your smart PIXEL (TAG) Manager5
  4. Boost2
  5. Product Catalog Feed by PixelYourSite2
  6. Cost of Goods by PixelYourSite1
  7. EDD Product Catalog Feed by PixelYourSite1
  8. pixelyoursite1

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)7
  2. CWE-352 Cross-site request forgery (CSRF)4
  3. CWE-502 Deserialization of untrusted data3
  4. CWE-200 Exposure of sensitive information2
  5. CWE-287 Improper authentication1
  6. CWE-862 Missing authorization1
  7. CWE-89 SQL injection1
  8. CWE-918 Server-side request forgery (SSRF)1