PI
Vendor
pixelyoursite
32
CVEs
0
On KEV
1
New 30D
Products
PC8.8
Product Catalog Feed by PixelYourSite
PixelYourSite
2 CVEs0 on KEV1 new
PY7.5
PixelYourSite – Your smart PIXEL (TAG) & API Manager
pixelyoursite
6 CVEs0 on KEV0 new
PI7.5
Pixelyoursite
Pixelyoursite
5 CVEs0 on KEV0 new
PP7.5
PixelYourSite Pro – Your smart PIXEL (TAG) Manager
pixelyoursite
5 CVEs0 on KEV0 new
PY7.1
PixelYourSite – Your smart PIXEL (TAG) Manager
PixelYourSite
5 CVEs0 on KEV0 new
PC8.8
Product Catalog Feed
Pixelyoursite
3 CVEs0 on KEV0 new
BO9.8
Boost
PixelYourSite
2 CVEs0 on KEV0 new
PP7.5
Pixelyoursite Pro
Pixelyoursite
2 CVEs0 on KEV0 new
CO7.2
Cost of Goods by PixelYourSite
pixelyoursite
1 CVEs0 on KEV0 new
EP7.1
EDD Product Catalog Feed by PixelYourSite
PixelYourSite
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-118078 New | PC Product Catalog Feed by PixelYourSite PixelYourSite | 7.2 | Oct 29 | WordPress Product Catalog Feed by PixelYourSite plugin <= 3.1.4 - PHP Object Injection vulnerability |
| CVE-2026-95530 | PY PixelYourSite – Your smart PIXEL (TAG) Manager PixelYourSite | 6.5 | Sep 23 | WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.4.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-9331 | EP EDD Product Catalog Feed by PixelYourSite PixelYourSite | 7.1 | Sep 8 | EDD Product Catalog Feed by PixelYourSite <= 1.0.2 - Authenticated (Subscriber+) Arbitrary Options Deletion via Missing Authorization on 'delete' Parameter |
| CVE-2026-18059 | PP PixelYourSite Pro – Your smart PIXEL (TAG) Manager pixelyoursite | 5.3 | Aug 1 | PixelYourSite <= 11.2.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint Missing Key Validation |
| CVE-2026-7613 | CO Cost of Goods by PixelYourSite pixelyoursite | 7.2 | May 20 | Cost of Goods by PixelYourSite <= 1.2.12 - Unauthenticated Stored Cross-Site Scripting via Cost of Goods Import |
| CVE-2026-7637 | BO Boost PixelYourSite | 9.8 | May 20 | Boost <= 2.0.3 - Unauthenticated PHP Object Injection via STYXKEY-BOOST_USER_LOCATION Cookie |
| CVE-2026-9010 | BO Boost PixelYourSite | 7.5 | May 20 | Boost <= 2.0.3 - Unauthenticated Blind SQL Injection via Multiple Parameters |
| CVE-2026-7049 | PP PixelYourSite Pro – Your smart PIXEL (TAG) Manager pixelyoursite | 7.2 | May 2 | PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter |
| CVE-2026-27072 | PY PixelYourSite – Your smart PIXEL (TAG) Manager PixelYourSite | 7.1 | Feb 20 | WordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.2.0.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-1841 | PY PixelYourSite – Your smart PIXEL (TAG) & API Manager pixelyoursite | 7.2 | Feb 13 | PixelYourSite <= 11.2.0 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2026-1844 | PP PixelYourSite Pro – Your smart PIXEL (TAG) Manager pixelyoursite | 7.2 | Feb 13 | PixelYourSite PRO <= 12.4.0.2 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2025-14280 | PY PixelYourSite – Your smart PIXEL (TAG) & API Manager pixelyoursite | 5.3 | Dec 29 | PixelYourSite <= 11.1.5 - Sensitive Information Exposure via Log File |
| CVE-2025-10588 | PY PixelYourSite – Your smart PIXEL (TAG) & API Manager pixelyoursite | 4.3 | Oct 22 | PixelYourSite <= 11.1.2 – Cross-Site Request Forgery to GDPR Options Modification |
| CVE-2025-22300 | PY PixelYourSite – Your smart PIXEL (TAG) Manager PixelYourSite | 5.4 | Jan 7 | WordPress PixelYourSite plugin <= 10.0.1.2 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-7870 | PY PixelYourSite – Your smart PIXEL (TAG) & API Manager pixelyoursite | 7.5 | Sep 4 | PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion |
| CVE-2024-37447 | PY PixelYourSite – Your smart PIXEL (TAG) Manager PixelYourSite | 4.8 | Jul 21 | WordPress PixelYourSite plugin <= 9.6.1.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2023-49824 | PC Product Catalog Feed by PixelYourSite PixelYourSite | 8.8 | Dec 17 | WordPress Product Catalog Feed by PixelYourSite Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-2584 | PP PixelYourSite Pro – Your smart PIXEL (TAG) Manager pixelyoursite | 4.8 | Jun 9 | PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting |
| CVE-2023-1804 | PC Product Catalog Feed Pixelyoursite | 6.1 | May 2 | Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS |
| CVE-2023-1805 | PC Product Catalog Feed Pixelyoursite | 6.1 | May 2 | Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS |
| CVE-2023-22700 | PY PixelYourSite – Your smart PIXEL (TAG) Manager PixelYourSite | 4.3 | Mar 13 | WordPress PixelYourSite – Your smart PIXEL (TAG) Manager Plugin <= 9.3.0 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2018-0578 | PI Pixelyoursite Pixelyoursite | 5.4 | May 14 | Cross-site scripting vulnerability in PixelYourSite plugin prior to version 5.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified… |