PixelYourSite vulnerabilities
We track 11 vulnerabilities in PixelYourSite products across 10 products. 11 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.
Latest PixelYourSite vulnerabilities
- 7.2 High severity
PixelYourSite: Improper Neutralization of Input During Web Page Generation
The PixelYourSite WordPress plugin before 11.4.3, PixelYourSite Pro WordPress plugin before 12.6.8 do not sanitise and escape a cookie value before printing it into the page output, which, on a site running a full-page cache, allows unauthenticated attackers t
- 7.1 High severity
EDD Product Catalog Feed by PixelYourSite: Missing Authorization
The EDD Product Catalog Feed by PixelYourSite plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the wpeddpcf_delete_feed function in all versions up to, and includi
- 7.2 High severity
Cost of Goods by PixelYourSite: Improper Neutralization of Input During Web Page Generation
The Cost of Goods by PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'csvdata[0][cost_of_goods_value]' parameter in versions up to, and including, 1.2.12 due to insufficient input sanitization and output escaping. This m
- 7.5 High severity
Boost: Improper Neutralization of Special Elements used in an SQL Command
The Boost plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_url' and 'user_name' parameters in versions up to, and including, 2.0.3 due to insufficient escaping on the user supplied parameters and lack of sufficient preparation on
- 9.8 Critical severity
Boost: Deserialization of Untrusted Data
The Boost plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.0.3 via deserialization of untrusted input in the STYXKEY-BOOST_USER_LOCATION cookie. This makes it possible for unauthenticated attackers to inject a PHP
- 7.2 High severity
PixelYourSite Pro – Your smart PIXEL (TAG)…: Server-Side Request Forgery
The PixelYourSite Pro – Your smart PIXEL (TAG) Manager plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 12.5.0.1 via the scan_video. This makes it possible for unauthenticated attackers to make web request
- 7.1 High severity
PixelYourSite – Your smart PIXEL (TAG) Manager: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager pixelyoursite allows Stored XSS.This issue affects PixelYourSite – Your smart PIXEL (TAG) Manager
- 7.2 High severity
PixelYourSite Pro – Your smart PIXEL (TAG)…: Improper Neutralization of Input During Web Page Generation
The PixelYourSite PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landing_page' parameter in all versions up to, and including, 12.4.0.2 due to insufficient input sanitization and output e
- 7.2 High severity
PixelYourSite – Your smart PIXEL (TAG) & API…: Improper Neutralization of Input During Web Page Generation
The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landing_page' parameter in all versions up to, and including, 11.2.0 due to insufficien
- 7.5 High severity
PixelYourSite – Your smart PIXEL (TAG) & API…: Improper Authentication
The PixelYourSite – Your smart PIXEL (TAG) & API Manager and the PixelYourSite PRO plugins for WordPress are vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.7.1 and 10.4.2, respectively, through publicly exposed log files.
- 8.8 High severity
Product Catalog Feed by PixelYourSite: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite Product Catalog Feed by PixelYourSite.This issue affects Product Catalog Feed by PixelYourSite: from n/a through 2.1.1.