Extension WordPress

Vulnérabilités PixelYourSite Pro – Your smart PIXEL (TAG) Manager

Cette page rassemble les failles publiées pour PixelYourSite Pro – Your smart PIXEL (TAG) Manager, leurs plages de versions affectées et les correctifs signalés dans la base locale.

4Vulnérabilités
0Critiques
4Avec correctif
7,2CVSS maximal

Historique de sécurité

CVE et vulnérabilités de PixelYourSite Pro – Your smart PIXEL (TAG) Manager

4 fiches

CVE-2026-7049 Élevée · 7,2
PixelYourSite Pro – Your smart PIXEL (TAG) Manager

PixelYourSite Pro <= 12.5.0.1 – Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter

The PixelYourSite Pro – Your smart PIXEL (TAG) Manager plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 12.5.0.1 via the scan_video. This makes it possible for unauthenticated attackers to make…

Versions affectées

*-12.5.0.1

Correctif

12.5.0.2

Publication

01/05/2026

CVE-2026-1844 Élevée · 7,2
PixelYourSite Pro – Your smart PIXEL (TAG) Manager

PixelYourSite PRO <= 12.4.0.2 – Unauthenticated Stored Cross-Site Scripting

The PixelYourSite PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'pysTrafficSource' parameter and the 'pys_landing_page' parameter in all versions up to, and including, 12.4.0.2 due to insufficient input sanitization and output escaping. This makes…

Versions affectées

*-12.4.0.2

Correctif

12.4.0.3

Publication

13/02/2026

CVE-2024-7870 Moyenne · 6,5
PixelYourSite Pro – Your smart PIXEL (TAG) Manager

PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 – Unauthenticated Information Exposure and Log Deletion

The PixelYourSite – Your smart PIXEL (TAG) & API Manager and the PixelYourSite PRO plugins for WordPress are vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.7.1 and 10.4.2, respectively, through publicly exposed log…

Versions affectées

*-10.4.2

Correctif

10.4.3

Publication

03/09/2024

CVE-2023-2584 Moyenne · 4,4
PixelYourSite Pro – Your smart PIXEL (TAG) Manager

PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 – Authenticated (Administrator+) Stored Cross-Site Scripting

The PixelYourSite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 9.3.6 (9.6.1 in the Pro version) due to insufficient input sanitization and output escaping. This makes it possible…

Versions affectées

*-9.6.1

Correctif

9.6.2

Publication

16/05/2023

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités