Vulnerabilities > Pixelyoursite > Pixelyoursite > 7.1.5

DATE CVE VULNERABILITY TITLE RISK
2024-09-04 CVE-2024-7870 Improper Authentication vulnerability in Pixelyoursite
The PixelYourSite – Your smart PIXEL (TAG) & API Manager and the PixelYourSite PRO plugins for WordPress are vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.7.1 and 10.4.2, respectively, through publicly exposed log files.
network
low complexity
pixelyoursite CWE-287
7.5
2024-07-21 CVE-2024-37447 Cross-site Scripting vulnerability in Pixelyoursite
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager allows Stored XSS.This issue affects PixelYourSite – Your smart PIXEL (TAG) Manager: from n/a through 9.6.1.1.
network
low complexity
pixelyoursite CWE-79
4.8
2023-06-09 CVE-2023-2584 Unspecified vulnerability in Pixelyoursite and Pixelyoursite PRO
The PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 9.3.6 (9.6.1 in the Pro version) due to insufficient input sanitization and output escaping.
network
low complexity
pixelyoursite
4.8
2023-03-13 CVE-2023-22700 Unspecified vulnerability in Pixelyoursite
Cross-Site Request Forgery (CSRF) vulnerability in PixelYourSite PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 9.3.0 versions.
network
low complexity
pixelyoursite
4.3